last executing test programs: 5.213696232s ago: executing program 3 (id=4170): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$gtp(0x0, 0xffffffffffffffff) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x20800, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000a40)={&(0x7f0000000900)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x20, 0x20, 0x4, [@float={0x3, 0x0, 0x0, 0x10, 0x2}, @enum={0x2, 0x1, 0x0, 0x6, 0x4, [{0x1, 0x4}]}]}, {0x0, [0x61, 0x2e]}}, 0x0, 0x3c, 0x0, 0x1, 0x5}, 0x28) ioctl$SIOCGETVIFCNT(r3, 0x89e0, &(0x7f00000000c0)={0xffffffffffffffff}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000001c0)=@bpf_lsm={0xe, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40000000}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="220000000400000010000000"], 0x48) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x24, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0xf, 0xf}, {}, {0x7}}}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="0100040000000000000003000000"], 0x14}}, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r7, &(0x7f0000000200)={0x0, 0xe, &(0x7f00000001c0)={&(0x7f0000000400)={0x2c, r6, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x994}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x97}]}, 0x2c}}, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r10 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r10, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x100000, @rand_addr=' \x01\x00'}]}, &(0x7f0000000180)=0x10) r11 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r11, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000200)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r10, 0x84, 0x9, &(0x7f00000000c0)={r12, @in6={{0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}, 0x0, 0x0, 0x0, 0x0, 0x64}, &(0x7f00000001c0)=0x9c) socket$nl_generic(0x10, 0x3, 0x10) ioctl$FS_IOC_GETFSUUID(r2, 0x80111500, &(0x7f00000002c0)) 4.63833711s ago: executing program 4 (id=4177): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x3, 0xc, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000610000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000110b0008850000005000000095"], &(0x7f0000000500)='GPL\x00', 0x7, 0x0, 0x0, 0x41100, 0x1, '\x00', 0x0, @sched_cls=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40082, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000140)) ioctl$PPPIOCGIDLE(r1, 0x8010743f, &(0x7f0000000140)) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r0, 0x0, 0x36, 0x0, &(0x7f0000000880)="c1188e99b95d02ff4284860186ddd06b2f4bad9aa8dbba9b838a2cd3813aeedc37a2c4c54baf00c48b852d7840ee363e02c019996b74", 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) r2 = socket$vsock_stream(0x28, 0x1, 0x0) ioctl$BTRFS_IOC_BALANCE_V2(r1, 0xc4009420, &(0x7f00000008c0)={0x16, 0x3, {0x2, @usage=0x10, 0x0, 0xffffffffffffffff, 0x1, 0x1, 0x3, 0xebf, 0x480, @struct={0x8, 0xfc}, 0xfff, 0x9, [0x0, 0x200, 0x1, 0x7fffffff, 0x2]}, {0x2, @struct={0x9971, 0x4}, 0x0, 0x2, 0x2, 0x3, 0x0, 0x1, 0x87, @usage=0x7fffffffffffffff, 0xff, 0xa27, [0x9, 0x9, 0xffffffffffffffff, 0x1, 0x5c, 0x4]}, {0x4, @struct={0xd, 0x1}, 0x0, 0x4, 0x0, 0x1ff, 0x3, 0x1ff, 0x408, @usage=0x8, 0x0, 0x1, [0xb, 0x100000001, 0x7, 0x8, 0x9, 0x20]}, {0x1, 0x6, 0xffffffffffffffff}}) ioctl$BTRFS_IOC_SCRUB(r1, 0xc400941b, &(0x7f0000000cc0)={r3, 0x10000}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000014c0)=@gettclass={0x0, 0x2a, 0x0, 0x70bd26, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {0xb, 0xb}, {0x6, 0x10}, {0x1, 0x6}}, ["", "", "", ""]}, 0xfffffffd}}, 0x2000a804) bind$vsock_stream(r2, &(0x7f00000000c0), 0x10) 3.118033353s ago: executing program 0 (id=4186): unshare(0x2a020400) (async, rerun: 32) r0 = socket$rds(0x15, 0x5, 0x0) (async, rerun: 32) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_MAX_CSMA_BACKOFFS(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000006c0)={0x20, r2, 0x1, 0x70bd2d, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc}]}, 0x20}, 0x1, 0x0, 0x0, 0x2000c805}, 0x4040040) (async) bind$rds(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) (async) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) (async, rerun: 64) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000640)=ANY=[@ANYBLOB="9feb010018000000000000003400000034000000060000000400000000000012020000000000000000000001050000018000000000000000010000850200000000000000010000000000000400000000da"], 0x0, 0x52}, 0x20) (async, rerun: 64) r5 = socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_DELETE(r5, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x5c, r6, 0x400, 0x70bd25, 0x25dfdbff, {}, [@L2TP_ATTR_MRU={0x6, 0x1d, 0x81}, @L2TP_ATTR_LNS_MODE={0x5}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0xc}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @private2}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'veth1_vlan\x00'}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @rand_addr=0x64010101}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000001}, 0x20040885) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000140)={r4, 0x20, &(0x7f00000001c0)={&(0x7f0000002700)=""/4116, 0x1014, 0x0, 0x0}}, 0x10) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r8, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x0, &(0x7f0000000040)}, 0x10) (async) sendmmsg$inet(r7, &(0x7f0000002c40)=[{{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000a80)="2a73ed35", 0x4}], 0x1}}], 0x1, 0x841) (async, rerun: 32) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000100)=ANY=[], 0xa4}}, 0x0) (rerun: 32) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x12, &(0x7f00000000c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8f, 0x0, 0x0, 0x0, 0x5}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x700}, {0x85, 0x0, 0x0, 0x86}, {0x7, 0x1, 0xb, 0x9, 0x0, 0x20}}, {}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x6}, @jmp={0x5, 0x1, 0x6, 0x0, 0x9, 0xfffffffffffffffc}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x2a}}}, &(0x7f0000000080)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x3}, 0x94) 3.062199194s ago: executing program 3 (id=4187): r0 = socket$inet6(0xa, 0x2, 0x0) close(r0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), r1) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000005c0)=0x56) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=@newlink={0x38, 0x10, 0x439, 0x2, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, 0x49809, 0x49a01}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @remote}]}}}]}, 0x38}}, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x14, &(0x7f0000000040)=0xb, 0x4) sendto$packet(0xffffffffffffffff, &(0x7f0000000400)="05d936277c6f5422007f83477ca1b278e3e4018a34e7bfd3de1a00ad6762646c95c716727eb53bcc", 0x28, 0x40880, &(0x7f0000000200)={0x11, 0x86dd, r2, 0x1, 0x4, 0x6, @local}, 0x14) setsockopt$inet6_mreq(r0, 0x29, 0x15, &(0x7f0000000400)={@mcast1, r2}, 0x14) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000ec0)={'wpan0\x00'}) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f00000000c0), r3) sendmsg$NL802154_CMD_DEL_SEC_KEY(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x14, r4, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0x4000071}, 0x44) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000000000007111670000000000851000000200000085000000b200000095000000000000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r6, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x8, 0x32, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000000000000000002fff300851000000600000018020000", @ANYRES32=0xffffffffffffffff, @ANYBLOB="000000000000001066000200f3ffffff180000000000000000000000000000009500040000000000360a020000000000180100002020782500000000002020207b1a00fe00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f0000000340)=""/222}, 0x78) write$bt_hci(r6, &(0x7f0000000580)=ANY=[@ANYBLOB="3500000002"], 0x8) r8 = socket$l2tp6(0xa, 0x2, 0x73) r9 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xc8000, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x2}) ioctl$TUNSETOFFLOAD(r9, 0x400454c9, 0xba98575a95aeb70d) ioctl$TUNSETLINK(r9, 0x400454cd, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r8, 0x29, 0x20, &(0x7f0000000080)={@remote, 0x800, 0x0, 0x3, 0x1, 0x8}, 0x20) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000300)={@map, 0xffffffffffffffff, 0x11, 0x2}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000040)=0x2005, 0x4) sendmsg$inet6(r0, &(0x7f0000000140)={&(0x7f0000000100)={0xa, 0x4e20, 0x80000, @loopback, 0xfffffffb}, 0x1c, 0x0, 0x0, &(0x7f0000000380)=[@rthdrdstopts={{0x18, 0x29, 0x32, {0x2f}}}], 0x18}, 0x1400c0c0) setsockopt$inet6_tcp_TLS_RX(r0, 0x11a, 0x2, &(0x7f00000000c0)=@gcm_128={{0x304}, "a57613a861020db5", "b8c979f96f504fca73f563e65c2b2163", "291d0955", "259d2271e004e902"}, 0x28) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000680)=ANY=[@ANYRES32=r5, @ANYBLOB="2bad993cca0221ab29baca03a7144ae3846c7341128e403be5ca9906a90250ff03d8b81b5f26c0a9240e40e6ce774ae31956", @ANYBLOB="000000000000000000fff6000000000000000000", @ANYRES32=0x0, @ANYRES64=r7, @ANYBLOB='\x00'/28], 0x1a) 2.917115135s ago: executing program 4 (id=4188): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x5, [@func={0xffffffff, 0x0, 0x0, 0xc, 0x2}, @func_proto]}, {0x0, [0x0, 0xb56cea99d7d0f667, 0x61]}}, 0x0, 0x35}, 0x28) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@base={0xa, 0xb, 0x42, 0x3e, 0x42}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r0, 0xffffffffffffffff}, &(0x7f0000000100), &(0x7f0000000180)}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r1, 0xffffffffffffffff}, &(0x7f0000000140), &(0x7f0000000280)}, 0x20) r3 = bpf$OBJ_GET_PROG(0x7, &(0x7f00000000c0)=@o_path={&(0x7f0000000080)='./file0\x00'}, 0x18) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r3, 0x0, 0x0, 0xc, 0x0, &(0x7f00000001c0)=""/12, 0x6, 0x0, 0x800, 0x88, &(0x7f00000005c0)="3aeb50d37b2b9f217b64305fbecef983083ffba4ddb83a95f7b3a0d0c8281e00cf99fda1822a023ea6c14c7de345c35bf66a64e2942a764939a4ff7e00806d551fb21d544eae9f61615a841a92a5ae437949aaf00e7572d7a12e0740c5b124d2e6c1d9fc57eba785f75e45e3a33080b5968748f10630452a268768fb690f854c7f918b8e528f3027b78d46f8bf77f892fb1c5612de05e23cb9740c6992662dc049d0c35e04afb3f55f5c8a3a3eb4f09a280fdbe57e50d290cac89879fcf8bbe3bcef9cb512528f008feae38d7807ecec26373d48088b61832afc734345ee547995cedf37cfdee1841636deb55bdab1f75bf9357de574bf804f4745072e74dc0410d40b0a133a173233d30c2eb6de220197000473b215f5674b22fdd90f338d6735d45b804b9bb728c260b9d5d110af108346b5c18b8e8ae86ee2a31b83ec69cf7880099a4aeeb5d1f64a2175665551e517d16ac609b6d4c4497bd8d271ec3312efdb3ed776eb779c1cd32f0a661b329f4b245578978383e8d1df7f1827bcf39ca022b3a1aafc4190abd2792ac591d21ec74905d595370f009a788e662a094a1b1983c12b0c535f92e8dcc831fadeb67701d12b834898fa495d83bdd2d00cb1894a3b485e176e95633ce1d5a93e6d9ed6d726ea72380af6f3be11b775f2485f66f355ded03167bc5c9538ff5a9ebcdeba4ad9bb36ae3750747c70a7f5634ccad83d73abfaa2901f33324691e68e573a22f28faef2bdc4c104ce0c2ae861ebf58b148bbde1721483cb96f57f3be2901104a7f7037ecbb7482434f6223218975133ec45a5c371215277000be2960e62864d9e79ba28c5d212c1a2462e7e7bb3768cd168a4e6f1a8d74f287adb96a16b703c51ea7f1b8fb0816f50bda4f732851c023948c5d8a299c129aa1e5d635eea18ea06050548cc20457b34aa5079aa33e6f2d0e49d54843499715b1f92200cd84cc365c474d0a07e2a00c1f01d8de31fb19d39dbcd836fef1ef1a8a367610250c14711922d4e8e5c98bbeaa5dc3eb8c3b91e6763b53c016931ae81050976edeadb5a834a67bdd513a376d0a2a292c1cc7c288a0d37c0e6612db0d107abe6a953e7f2e718592a4a7421e9fccbc08edf493bf7128e45c1444cc551efb299a2ef4dd81bc351d3c66cd497adc80939c4293609a6d2872fd35cac3b5f5b12ab7e0dca8fac2d21c28b3730a1a1bf4613110bea669621aa83ce62dd054595ae75e45c9db50d8cd5db57fce70f23722654eac92ed2a611ac6bcab747d843d009937508e2969f48ee0a51662c82300b4d39e050c7ba906a109f4f3681f23cc55620b6cffc19fdc33baba70a58f8e3ec33f1040d3fea3c9ea39beabc181b47d4f1fa83a916bffcc28f546506f2d7efd127bc8e1df6ed626ac434d74ad0ec448e63d0a1cf8be281676d394a741169cb260f6b34803706f4de4475731035a58c5399d49d7078437ef9b6918059e0aa8a338fd97bf25add312d2f777098e0d85ecbd174fefb7d1f121dfd017dcb3b408462a6278beb4eb4cb70a121052d29312de6c764d88108f0547f8ebddd0aad21b8cf02070ecad7a2cd20d81c651b5763d4e8502da169450d5926d09c409224e2d352bf96d6d05229ca994ab74e6c7fb2a618f261367bda327a9d142a3682006c0c39f23cac0d591582e4eeb17b72b9a4833beee44843d61458092438652148429482f4d49b6a4589ea6567219d4fe2a8205ec8c9936f7e7c3c271ebe2b9a3d876b0478e92d09c518f8448867f6ffc81c810d2e8b1a7836e0f4676f0c00f8904b21efdedd7ad5b57db36605c1bd7e0e82c4ebb930770cccfb6bb9521516f23a35677c7026b7bd21157d5ac739006f77d1522d9af0dccbb4a2eec45b7e05cd319cc204a7102dc2b59b8776d23902e6fce9c1896c1d1576c6a93715d85ef718d19f02cf885925a4fe307a62b74fa43e385ef2bf7ae9b162b1c98ae6790366d93d405f9fa8de0ceba43c20e76c91e18d5775d186ec628624a86dec1b6d102322032c7baf51b78b6d84800502cce787e2bd5fc71ee57149769d0543a4a779e9ab145a63c94e00ef33a96d36028df29b42268ed842f8d93139205315c041bf1e845f051b46b2b293c142258de992e976727380577598edf10f9f6461e74fd9ce2381f828cf470fdbe232c64a0406be4381eacc11770f95ac77eeb340ee11accc1677f16ff7ddbe3eb7f709990e543dd12e0d81095976f4cfcd7c1dd80cae2d40f34766a27aea280ed3b8160cb2f832c8d6ba752a26d449e0b8a53603f5b01dae1450c810d1f5a09d4d7cbb877c8b4c6e2cbe5df29ba326c99de77d2a30f337a884e9c3928199f6dc0c3fe3f7b95dea9c46b19c0b3114a7da890ab7591de8ea5d1ccedcd778ad784dd4d974de8d3d723e4d54311342132938935dd9ff93c0aaf23504762fca26f43c20196a261cc00c94400fe843b4f6f06934410393069fce85bf24fae197d9cea98362eaed60778f2b9d36051e0da8e92d6df4bdc2a114c86b77df80ba4ab244fb4b2521494f98ca4b87c8053316b49052b1f68bcf6f3d6bdf8bc47f4e054baa00f200d819a710affcaebe984f37c1702ebc333430b7cd80d80eb579868142a3fd95e675626074a52c080fc973d10604a144b3ac7e7bbff82a5821db6408044f1e9635589c09b66d9cbc9615b4ca016cac6a48e774da91a13ea96125da63c25be3ebb365d7f16af4a61f563cf12c7276c290ae2da7523863b7cde274a0b34241698f25922d2c57ebd159068f654396c3ee147e118ab6ec348a10ec56019b9c39cd36c4d83bb6e264e82a94f635aab3d756ede9a3509f1f27e6d2816e88eb9303db0d7162eaff98805bdd34f680cdf95ff352f04e065b719bb22fcab2b56fc43356b2eef9bf", &(0x7f0000000200)="9d7328d6e0eff2079603250dc610ca6b1e5cbe6e2bab081652abe6ac9d23f9372b3b16643a5ea8b7e9a090e414be582a1b9a472e8a007ce3ecfd035ed6a8091d9adb97d6601215cf7ba1e5d41e2619f7727ad88954b2885d5fe237171b99a062625d3d4216b9b30743ac38d9d1350ad13dda19d2a26a8aec386f02c5755bb3d6eb0d99c482bd2c2e", 0x6, 0x0, 0x5}, 0x50) socket$nl_route(0x10, 0x3, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0xa, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000630122000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000340)='cgroup.controllers\x00', 0x0, 0x0) r5 = accept4$packet(r4, 0x0, &(0x7f0000000380), 0x800) getsockname$packet(r5, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) write$cgroup_subtree(r6, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r6, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r8 = openat$cgroup_procs(r7, &(0x7f00000003c0)='cgroup.procs\x00', 0x2, 0x0) preadv(r8, &(0x7f0000002880)=[{&(0x7f00000000c0)=""/91, 0x5b}], 0x1, 0xa2e1, 0xc) r9 = openat$cgroup_procs(r7, &(0x7f0000000080)='tasks\x00', 0x2, 0x0) preadv(r9, &(0x7f00000039c0)=[{&(0x7f0000000140)=""/142, 0x8e}], 0x1, 0x4, 0x3) sendfile(r8, r8, 0x0, 0x10001) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000180), 0x35c, 0x0) mkdirat$cgroup(0xffffffffffffffff, &(0x7f0000000180)='syz1\x00', 0x1ff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x11, 0xc, &(0x7f00000001c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x4, 0x1005, &(0x7f00000014c0)=""/4101, 0x0, 0xc}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1830c8a0de7029f700000100001877ca466ce8985bb6b0260d81ce0000000000030004009500"], &(0x7f0000000080)='syzkaller\x00', 0x8, 0x0, 0x0, 0x41000, 0x1}, 0x94) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) accept4$x25(r10, &(0x7f0000000100), &(0x7f0000000140)=0x12, 0x0) 2.900614841s ago: executing program 0 (id=4189): r0 = socket$packet(0x11, 0x2, 0x300) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000740)={'pim6reg1\x00', 0x400}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'rose0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x800) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x7, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0xe59600, 0x0, 0x0, 0x0, 0xfffffff7}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r3}}]}, &(0x7f00000000c0)='GPL\x00', 0x5, 0x0, 0x0, 0x41000, 0x0, '\x00', r2, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000100)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000140)={0x1, 0xe}, 0x10, 0x0, 0x0, 0x8, &(0x7f0000000180)=[0x1, 0xffffffffffffffff], &(0x7f0000000280)=[{0x1, 0x3, 0x2, 0x2}, {0x4, 0x4, 0x4, 0x6}, {0x2, 0x1, 0x7, 0x6ec4572015a38838}, {0x5, 0x4, 0x2, 0xa}, {0x0, 0x4, 0x7, 0x5}, {0x1, 0x5, 0x10}, {0x5, 0x2, 0x0, 0x9}, {0x4, 0x4, 0x9}], 0x10, 0x2}, 0x94) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f0000000400)=r5, 0x4) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="2000000011000100000002000006000000000000", @ANYRES64=r2], 0x20}}, 0x44800) 2.794361246s ago: executing program 3 (id=4190): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) listen(r1, 0xc) setsockopt$sock_timeval(r1, 0x1, 0x42, &(0x7f0000000000)={0x0, 0xea60}, 0x10) accept(r1, 0x0, 0x0) socket(0x10, 0x3, 0x0) r2 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r2, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4e21, @local}, 0x10, 0x0}, 0x30004001) r3 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x6, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="180d0000ffffffff000000cd59cca4a99080b98a000000180000000300000010000000080000009500"/63], &(0x7f0000000240)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x359}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r4, 0x0, 0xe, 0x0, &(0x7f0000000140)="410c49bc3c388e38d0da5a20564e", 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) recvmmsg(r3, &(0x7f0000000fc0)=[{{&(0x7f00000003c0)=@generic, 0x80, &(0x7f0000000080)=[{&(0x7f0000000440)=""/207, 0xcf}, {&(0x7f0000000540)=""/162, 0xa2}, {&(0x7f0000000600)=""/77, 0x4d}], 0x3, &(0x7f0000000680)=""/224, 0xe0}, 0x6}, {{&(0x7f0000000780)=@isdn, 0x80, &(0x7f0000000800)=[{&(0x7f0000001240)=""/4096, 0x1000}, {&(0x7f0000000240)=""/64, 0x40}], 0x2, &(0x7f0000000ac0)=""/174, 0xae}}, {{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000cc0)=""/224, 0xe0}, {&(0x7f0000000c00)=""/87, 0x57}, {&(0x7f0000000dc0)=""/209, 0xd1}], 0x3, &(0x7f0000000ec0)=""/195, 0xc3}, 0x81}], 0x3, 0x10120, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r5, &(0x7f0000000500)="a4", 0x34000, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) r6 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f00000000c0)={0x4, &(0x7f0000000040)=[{0x0, 0x2, 0x5, 0x3}, {0x7, 0x1, 0x3b, 0x4}, {0x9, 0x4, 0x5, 0x4}, {0x401, 0x5, 0xb, 0x8000}]}, 0x10) setsockopt$sock_timeval(r5, 0x1, 0x15, &(0x7f0000000300)={0x77359400}, 0x10) r7 = socket$inet(0xa, 0x801, 0x84) sendmmsg$inet_sctp(r7, &(0x7f0000001780)=[{&(0x7f0000000100)=@in6={0xa, 0x0, 0x0, @private2}, 0x1c, &(0x7f0000000440)=[{&(0x7f0000000140)="86", 0x1}], 0x1, &(0x7f00000001c0)=ANY=[@ANYBLOB="2000000000000000840000000800000000000000000000000000000000000001180000000000000084000000070000000a"], 0x38}], 0x1, 0x0) sendto$inet(r7, &(0x7f0000000580)="e923d8", 0x3, 0x20000000, &(0x7f0000000600)={0x2, 0x4e26, @multicast2}, 0x10) setsockopt$inet_group_source_req(r7, 0x0, 0x2f, &(0x7f0000000880)={0x7, {{0x2, 0x4e22, @multicast2}}, {{0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x40}}}}, 0x108) sendto$inet6(r5, &(0x7f0000000240)="d3", 0x1, 0x81, &(0x7f0000000280)={0xa, 0x4e24, 0x8, @remote, 0x7}, 0x1c) bind$nfc_llcp(r3, &(0x7f0000000280)={0x27, 0x0, 0x1, 0x5, 0x0, 0x6, "23ba4cb148e27a62778ab6e2ad47e2f096dbae5488d838161da26752700a993a9898b753acbbe03034a8e6487bac34f3e95e88aaaafc3788337701a4cd90bb", 0x21}, 0x60) r8 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000340)={@ifindex, 0xe, 0x0, 0xfffffffe, &(0x7f00000000c0), 0x0, 0x0, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0], &(0x7f0000000240)=[0x0, 0x0, 0x0], 0x0}, 0x40) r10 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000480)={0xffffffffffffffff, 0x9}, 0xc) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.current\x00', 0x26e1, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000780)={{}, &(0x7f0000000540), &(0x7f0000000740)=r11}, 0x20) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000001080)=ANY=[@ANYRES32=r10, @ANYRES32=r8, @ANYBLOB="300000000400000000000000388140c03eba9ae0bb8976123734a30e2a83", @ANYRESOCT=r0, @ANYBLOB="61d3ba8e90720cc35eff971cb6247b9d3e445f8066ee5ce4412d0c54b275379bc687f3accbdd6732ab32f00501010000f8a15655383e503a544281ecff6f5f98e6ce6191cb9ad50cb3f51bb3de1060f2ecb05df85a6c4f60333455809d3b8d7a3a8aebea2746bdf2ddd83d03a30c4afbc3e7569603ff8a6ff5154758a3d05c446468eb8385d4be0e2ca5033ca0a87a740c2909fd6fd75679cb2691c8771e089a746557e1ce1b3f856a198d763724504f647c2228f4831a64b4b40524a97466", @ANYRES64=r9], 0x20) socket$kcm(0x10, 0x2, 0x4) 2.79350057s ago: executing program 4 (id=4191): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), r0) sendmsg$IEEE802154_LIST_PHY(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000300)={0x14, r1, 0x30b, 0x0, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x404c857}, 0x20060000) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x0, @ANYBLOB="00000000800000000008a116edfe", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x9, 0x4, &(0x7f0000000380)=@framed={{0x18, 0x6, 0x0, 0x0, 0x1}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff8}]}, &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x62, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000000)=@framed={{0x18, 0x6}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r3}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bind$inet6(r2, &(0x7f0000000300)={0xa, 0x4e23, 0x0, @loopback, 0x3}, 0x7e) setsockopt$inet_sctp6_SCTP_RTOINFO(r2, 0x84, 0x0, &(0x7f0000000000)={0x0, 0xfffffffe, 0x8001, 0x6}, 0x10) sendto$inet6(r2, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="34000f00100001e65a127a940dcb5f0800000000217a2e73d76b097e6f7e0500000000000000f123fa60149bfbfbd043f678aca8de61", @ANYRES32=0x0, @ANYBLOB="000000002104020008001b00000000000c001a800800028004000180"], 0x34}, 0x1, 0x0, 0x0, 0x4040000}, 0x8024) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="6000000010000108fdff00000080000000000200", @ANYRES32=0x0, @ANYRESDEC=r1], 0x60}, 0x1, 0x0, 0x0, 0x4040080}, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000000600), r0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r6, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r6, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r6, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r6, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4) setsockopt$inet_tcp_TCP_CONGESTION(r6, 0x6, 0xd, &(0x7f0000000040)='veno', 0x4) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_MSG_GETSETELEM(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4c0000000d0a010800000000000000000a00fffe0900020073797a31000000960900010073797a3100000000200003801c000080080003400000000210000a800400028008000180ffffffff"], 0x4c}, 0x1, 0x0, 0x0, 0x4044840}, 0x8000) setsockopt$inet_tcp_TCP_REPAIR(r6, 0x6, 0x13, &(0x7f00000001c0), 0x4) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="9feb0100180000000000000024000000240000000a00000000000000000000020000000000000000010000840800100006000000010000000300000b0000000000002e"], &(0x7f0000000380)=""/3, 0x46, 0x3, 0x1}, 0x28) sendto$inet(r6, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(r6, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) syz_genetlink_get_family_id$fou(&(0x7f0000000900), r5) 2.660798894s ago: executing program 0 (id=4194): unshare(0x400) (async) unshare(0x400) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(seed-generic)\x00'}, 0x58) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r2, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r2, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r3, 0x2000000, 0xe, 0x0, &(0x7f0000000040)="630b008646dc3f0adf33c9f7b986", 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) socket$kcm(0x2, 0xa, 0x2) (async) r5 = socket$kcm(0x2, 0xa, 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BTRFS_IOC_SCRUB(r4, 0xc400941b, &(0x7f00000005c0)={0x0, 0x549, 0x5}) ioctl$BTRFS_IOC_DEV_REPLACE(r6, 0xca289435, &(0x7f0000000a40)={0x0, 0x2, @start={r7, 0x1, "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", "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"}, [0x8, 0x3, 0x2, 0x8000000000000001, 0x1, 0x3, 0x0, 0x9, 0xfe, 0xfffffffffffffffe, 0x314, 0x8, 0x2, 0x2, 0x2, 0x3, 0x6c, 0x8, 0xb, 0x0, 0x9, 0x0, 0x7, 0x3, 0x9, 0xed, 0x4, 0x38, 0x3, 0x0, 0x10, 0x5, 0x2, 0x0, 0x4, 0x7, 0x0, 0x1, 0x9, 0x4, 0x3de, 0x100, 0x0, 0x7, 0x9, 0xfffffffffffffffa, 0x100, 0x80000001, 0xffffffffffffff80, 0x2c73, 0xb, 0x10, 0x3d, 0x101, 0x3, 0xca5, 0x3, 0x3, 0x6, 0x0, 0x6, 0x285, 0x1000200, 0x80000000]}) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff, 0x4}, 0x10) r8 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r8, &(0x7f0000000100)={0x3, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={0x2, 0x9, 0x0, 0x2, 0x2, 0x0, 0x0, 0x40000}, 0x10}, 0x1, 0x7}, 0x40030000000000) (async) sendmsg$key(r8, &(0x7f0000000100)={0x3, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={0x2, 0x9, 0x0, 0x2, 0x2, 0x0, 0x0, 0x40000}, 0x10}, 0x1, 0x7}, 0x40030000000000) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) write$tun(r4, &(0x7f0000000240)={@val={0x0, 0xacf}, @val={0x2, 0x80, 0x9, 0x4, 0x0, 0xca6}, @mpls={[{0x9, 0x0, 0x1}, {0x6}, {0x68f7}, {0xfff, 0x0, 0x1}, {0x7}, {0xf64b}, {0x8}, {0xffff1}, {0x99, 0x0, 0x1}, {0x2}], @ipv4=@gre={{0x1f, 0x4, 0x0, 0x0, 0x310, 0x68, 0x0, 0x5, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x39}, @loopback, {[@generic={0x0, 0x11, "3fdcebcaee86287675033e49d197ba"}, @timestamp_prespec={0x44, 0x54, 0x8d, 0x3, 0x9, [{@empty}, {@local, 0xec}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x6}, {@local, 0x100}, {@multicast2}, {@broadcast, 0x401}, {@private=0xa010102, 0x9}, {@private=0xa010102, 0x10001}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x5}, {@private=0xa010100, 0x4}]}]}}, {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b, 0xcb, 0x0, [0x3], "859b48626cb4bd09996b4d5735f08ab98daa58a2f6a1aab035f6a43169ebc8c8122273688883c7340491f6462790b2cd2c684d032351b8d68f2cbeaf2f856123c9181e907956439ce1b351fe1b7e225fc9c7b0aa1887db99c2357b3fa7dae872a9487db047ad421e82f306615182b4d0b97439e9bd33292c47ff4522a92c65f2257f3582372be8c0a15a4a4014b303b97572d92bbd295a334d1fefc928d74b5471ba9a10af3625bbd4bad71c40de39b448fa8b0570e2134b2ec3d95996fb4ba99f2bf28c678f24aa35340f"}, {0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x800, [], "d577d15441d3493c69b97efc2394987c13b80b21a4ac2a163e79669fdfb0a52bede587249e1a15da590025f8e718f90847ecbf98e0d37aae0c3882486f11869a052681556ceaf03a41f29dada4509890ca15322881325a6296f457d3c57c8f1b2d764e3a872ced9aec67cb579afa12b14b955e1eb49b30e36b07d4"}, {0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x86dd, [0x40], "d7c57c20f76beb8bc7d72596abe44da600ed1e39f65b08ec6d4e94cbd65856c782a4f8e7900364b5b6230530a9679289dc1aa943a165214fef9ef3a1a31090"}, {0x8, 0x88be, 0x2, {{0x0, 0x1, 0x4, 0x2, 0x0, 0x0, 0x0, 0x1}, 0x1, {0x800}}}, {0x8, 0x22eb, 0x3, {{0x7, 0x2, 0xe, 0x0, 0x1, 0x1, 0x2, 0x7}, 0x2, {0x80000001, 0x8, 0x1, 0x7, 0x1, 0x0, 0x3, 0x0, 0x1}}}, {0x8, 0x6558, 0x1, "b1edb5867384ec343e5610681cccb7abe566617dd031a7812150edec04722276841243e59619419e47cfa4fd53da4e335ef1bd50c8163ea75f484454fcfce2d2ee67d864d74d9baa243ed6108587c69b9cd4f6efa0707457fcfa3c8372b7b6b3d1a2288f722f4234f4a285dd649b9c8f9778db134d590e647aef8131dc20901fcfb610ed8278dcb8df35a4a0685b63e8289472da0e775275e9d30fba4d66c0a9764347855e6264d85bbbcada80110db4b4a123c2bf940530168c004da2a46cf0d7cfe1f7009199"}}}}}, 0x346) (async) write$tun(r4, &(0x7f0000000240)={@val={0x0, 0xacf}, @val={0x2, 0x80, 0x9, 0x4, 0x0, 0xca6}, @mpls={[{0x9, 0x0, 0x1}, {0x6}, {0x68f7}, {0xfff, 0x0, 0x1}, {0x7}, {0xf64b}, {0x8}, {0xffff1}, {0x99, 0x0, 0x1}, {0x2}], @ipv4=@gre={{0x1f, 0x4, 0x0, 0x0, 0x310, 0x68, 0x0, 0x5, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x39}, @loopback, {[@generic={0x0, 0x11, "3fdcebcaee86287675033e49d197ba"}, @timestamp_prespec={0x44, 0x54, 0x8d, 0x3, 0x9, [{@empty}, {@local, 0xec}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x6}, {@local, 0x100}, {@multicast2}, {@broadcast, 0x401}, {@private=0xa010102, 0x9}, {@private=0xa010102, 0x10001}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x5}, {@private=0xa010100, 0x4}]}]}}, {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b, 0xcb, 0x0, [0x3], "859b48626cb4bd09996b4d5735f08ab98daa58a2f6a1aab035f6a43169ebc8c8122273688883c7340491f6462790b2cd2c684d032351b8d68f2cbeaf2f856123c9181e907956439ce1b351fe1b7e225fc9c7b0aa1887db99c2357b3fa7dae872a9487db047ad421e82f306615182b4d0b97439e9bd33292c47ff4522a92c65f2257f3582372be8c0a15a4a4014b303b97572d92bbd295a334d1fefc928d74b5471ba9a10af3625bbd4bad71c40de39b448fa8b0570e2134b2ec3d95996fb4ba99f2bf28c678f24aa35340f"}, {0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x800, [], "d577d15441d3493c69b97efc2394987c13b80b21a4ac2a163e79669fdfb0a52bede587249e1a15da590025f8e718f90847ecbf98e0d37aae0c3882486f11869a052681556ceaf03a41f29dada4509890ca15322881325a6296f457d3c57c8f1b2d764e3a872ced9aec67cb579afa12b14b955e1eb49b30e36b07d4"}, {0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x86dd, [0x40], "d7c57c20f76beb8bc7d72596abe44da600ed1e39f65b08ec6d4e94cbd65856c782a4f8e7900364b5b6230530a9679289dc1aa943a165214fef9ef3a1a31090"}, {0x8, 0x88be, 0x2, {{0x0, 0x1, 0x4, 0x2, 0x0, 0x0, 0x0, 0x1}, 0x1, {0x800}}}, {0x8, 0x22eb, 0x3, {{0x7, 0x2, 0xe, 0x0, 0x1, 0x1, 0x2, 0x7}, 0x2, {0x80000001, 0x8, 0x1, 0x7, 0x1, 0x0, 0x3, 0x0, 0x1}}}, {0x8, 0x6558, 0x1, "b1edb5867384ec343e5610681cccb7abe566617dd031a7812150edec04722276841243e59619419e47cfa4fd53da4e335ef1bd50c8163ea75f484454fcfce2d2ee67d864d74d9baa243ed6108587c69b9cd4f6efa0707457fcfa3c8372b7b6b3d1a2288f722f4234f4a285dd649b9c8f9778db134d590e647aef8131dc20901fcfb610ed8278dcb8df35a4a0685b63e8289472da0e775275e9d30fba4d66c0a9764347855e6264d85bbbcada80110db4b4a123c2bf940530168c004da2a46cf0d7cfe1f7009199"}}}}}, 0x346) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x208}, 0x50) bind$bt_hci(r9, &(0x7f0000000000)={0x1f, 0x0, 0x4}, 0x6) (async) bind$bt_hci(r9, &(0x7f0000000000)={0x1f, 0x0, 0x4}, 0x6) 2.311981416s ago: executing program 2 (id=4197): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000008c0)={@fallback, 0xffffffffffffffff, 0x10, 0x3}, 0x20) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000140)=@newqdisc={0x94, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r3, {0xffff}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0xc, 0x5, 0xd, 0x8b, 0xd, 0x80, 0x4, 0x2, 0xf, 0x6, 0x3, 0x7, 0x8, 0x14, 0x10, 0x4], 0x3, [0xb, 0x3, 0xad1e, 0x2002, 0x1, 0x4, 0x2, 0xd06, 0xff05, 0x2, 0xb, 0x3, 0x5, 0x6, 0xe, 0x100], [0xfff1, 0x5, 0xffff, 0xfff5, 0x4, 0x8, 0x1, 0x9, 0x5, 0x2, 0xc, 0x4, 0xfffc, 0x3, 0x1]}}]}}, @TCA_RATE={0x6, 0x5, {0x2, 0x68}}]}, 0x94}, 0x1, 0x0, 0x0, 0x4005c}, 0x0) 2.2335673s ago: executing program 0 (id=4199): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x60ae0}], 0x318, 0x0, 0xdb0, 0xf5ffffff}, 0x3f01) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x5a}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000240)={@fallback=r1, r1, 0x2f, 0x0, 0x0, @void, @value=r1}, 0x20) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000d00)={0x0, 0x0}, 0x8) r3 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000)=r2, 0x4) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000180)={r3, 0x0, 0x0}, 0x10) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000b80)={r3, r3, 0x4, r1}, 0x10) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r4, &(0x7f0000000140)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0) r5 = socket$inet6(0xa, 0x1, 0x0) close(r5) r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x10, &(0x7f0000000000)=@framed={{0x18, 0x6, 0x0, 0x0, 0x40000}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r6}, {}, {}, {0x7, 0x0, 0xb, 0x7}}, @printk]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000980)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000f8ffffff850000002d000000a50000009e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000007c0)={r7}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000000)=@framed={{0x18, 0x6}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r6}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000000)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r8, 0x84, 0x6f, &(0x7f0000000100)={0x0, 0x10, &(0x7f0000000280)=[@in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) r9 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r9, &(0x7f0000000200)=@name={0x1e, 0x2, 0x0, {{0x42, 0x3}, 0x4}}, 0x10) bind$tipc(r9, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10) r10 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r10, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) bind$tipc(r10, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x4}}, 0x10) bind$tipc(r9, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42, 0x20000003}}}, 0x10) bind$tipc(r9, 0x0, 0x0) 2.038235469s ago: executing program 2 (id=4201): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="1c0088a801000b00000014"], 0x36) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000080)={'nicvf0\x00', 0x400}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$rxrpc(0x21, 0x2, 0xa) connect$rxrpc(r3, &(0x7f0000000040)=@in4={0x21, 0x2, 0x2, 0x10, {0x2, 0x4e20, @private=0xa010102}}, 0x24) sendmsg$nl_route_sched(r2, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f00000000c0)=@newtaction={0x898, 0x30, 0x12f, 0x0, 0x0, {}, [{0x884, 0x1, [@m_police={0x880, 0x1, 0x0, 0x0, {{0xb}, {0x854, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x80000000, 0x0, 0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x8001, 0x0, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x3, 0x0, 0x80, 0x5, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0xfffffffc, 0xb, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0xffffff35, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0xfffffffd, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x3, 0x0, 0x1]}], [@TCA_POLICE_RATE={0x404, 0x2, [0x7, 0x6, 0xffffffff, 0x7f, 0x401, 0x2, 0x0, 0x2, 0x3de8, 0x4, 0x5, 0x8, 0x0, 0x7fff, 0x75ba, 0x7fffffff, 0x5, 0xffffffff, 0x7ff, 0x2, 0x9, 0x2, 0x0, 0x1000, 0x1, 0x7fff, 0x6, 0x0, 0xfa, 0x4, 0x0, 0xf, 0x80000001, 0x7, 0xfffffffb, 0x1, 0x20, 0x5, 0xb, 0x1, 0x2f2, 0x7fff, 0x0, 0x81, 0x206, 0x1ff, 0x7, 0x3, 0x5, 0x3, 0x9, 0x1000, 0x401, 0x1, 0x6, 0x7, 0x2, 0x4, 0x7f, 0x5, 0xfffffffb, 0x1, 0x4, 0x5, 0x8, 0x2000009, 0x9, 0x10, 0x9, 0x7, 0xffffff00, 0x97, 0x0, 0x4, 0x8, 0x8, 0x1, 0x958, 0x1fe, 0x4, 0x6, 0x7, 0x80, 0x5, 0xe53, 0x0, 0xfffffffe, 0x4, 0x8, 0x9, 0x7fff, 0x30, 0x8, 0xfffffff7, 0x4, 0x9, 0x1, 0x4, 0x7, 0x9, 0x5, 0x7, 0x6, 0x0, 0x5, 0x2, 0x7, 0x3, 0xcdd, 0x2, 0xd67, 0x7, 0x5, 0x25, 0x9dc5, 0x7, 0xfffffff7, 0x2, 0x400, 0x8, 0x0, 0x7, 0x5, 0x9, 0xa, 0xa, 0x9, 0x5, 0xdb5, 0x101, 0x4, 0x74e4, 0x7fff, 0x7, 0x7ff, 0x1, 0xd70, 0x1, 0x8, 0xa, 0x7, 0x1, 0x82, 0x52e, 0x7, 0x1, 0x5, 0x26, 0x1, 0x1b2a, 0x81, 0x9, 0x1c, 0x767, 0x7, 0x9, 0x10, 0xc2a, 0xff, 0x7, 0x6, 0x3, 0x3, 0xfffffff4, 0x8, 0x3, 0xfff, 0x8, 0x2, 0x5, 0x6, 0x3, 0xd7c3, 0x2, 0x1, 0x7fff, 0x5, 0x5, 0x0, 0xfffffff7, 0x4, 0x2, 0x0, 0x6ee1847d, 0x10001, 0x7ff, 0x1, 0xf0, 0x7, 0x2, 0x7, 0x4, 0x6, 0x4, 0x7, 0x2, 0x0, 0x1, 0x4, 0x3, 0xfff, 0x80000001, 0x7, 0x676, 0x3, 0x9, 0x2, 0x4, 0x7fff, 0x4a5, 0x23, 0x4, 0x9, 0x8, 0x0, 0x8000, 0xa, 0x9, 0xca000000, 0x2, 0xfffffffa, 0x3, 0x7, 0x9, 0x7, 0x61fe, 0x9, 0x6, 0x4, 0x80000000, 0x5, 0x801, 0xb848, 0x6, 0x6, 0x800, 0x7, 0x1, 0xb, 0x80, 0x2, 0x3, 0x7e54, 0xa, 0x4, 0x4, 0xc, 0x80000001, 0x5, 0x5, 0x10000002, 0xb, 0x7, 0x2, 0x2, 0x4]}], [@TCA_POLICE_TBF={0x3c, 0x1, {0x3, 0x1, 0x7, 0x4, 0x1, {0x7, 0x0, 0x3, 0x7, 0x7, 0x80000001}, {0x4, 0x2, 0x2, 0xa, 0x1ff, 0x1c0000}, 0x9, 0xbc, 0xdf72c67}}], [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0xffffffffffff22ff}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x898}}, 0x0) 1.945933634s ago: executing program 3 (id=4203): r0 = socket$l2tp(0x2, 0x2, 0x73) unshare(0x80) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000380)='ns/time_for_children\x00') bind$inet(r0, &(0x7f0000000140)={0x2, 0x4e20, @empty}, 0x10) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) 1.891628977s ago: executing program 4 (id=4204): bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000780)={@map, 0xffffffffffffffff, 0x35, 0x30}, 0x20) r0 = socket(0x10, 0x3, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000002b40), r1) sendmsg$NLBL_MGMT_C_ADD(r1, &(0x7f0000002c40)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0xf4, r2, 0x1, 0x70bd23, 0x25dfdbfe, {}, [@NLBL_MGMT_A_DOMAIN={0xc7, 0x1, 'n\x01l\xb1\xd7jt/l\xdc\x82{V \xb82cap\x00\x83\xf2\xa6L6\xeb;\xe6\xd9\xa7\x1bsj\xb0$\x96\xda\xf5/\x9ct\xdb@\x82-\x97.O\xd6w\xce\xe5\xe1Ik^\xee\xa9=\x98\xdf\xf0S\x96\x0fr2\x9c\xdc\a\x90\xcc\x198\xf3\r\x96\x8fM*F\xa2Y7\xc3\xfd\x1br.<\x1b\xbd)^\x9f\xaar\xaexpW%\xf7L\xc9\x1d:\xb1\xc5f\xe3K{\xa3\xb1\xd5N\xf4Yj\x9fz\x03w\xd3\x8f\x11\xefC\x89\xa9\xfe\"T=4\x89\xe6S6G\"\xef\x8c\x0fm\xab\xa4\x15\x0f\x84\x15\xdf\x87\xc8\x82$\x18.~\xdf8\x92\xf5\xd9c\xd8.\xceyZ\xed\xfb\xd22\x86\xc7Q\xd5\x99\xf3Mbs\xb4n\x8d#\x04\x99qBF\rG'}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @rand_addr=0x64010100}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @loopback}]}, 0xf4}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000080) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7fffffff}, 0x10) sendmsg$kcm(r0, &(0x7f00000016c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="2e00000022008102e00f80ecdb4cb9020a", 0x11}, {&(0x7f0000000a80)="0cf2e153a074a59ae15c1863473bbce6798a60e9000000000000000000", 0x1d}], 0x2, 0x0, 0x0, 0x10}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r4, &(0x7f0000002a80)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000740)={0x28, 0x13, 0x1, 0x70bd2b, 0x25dfdbf8, "", [@nested={0x18, 0x4f, 0x0, 0x1, [@nested={0xc, 0x2, 0x0, 0x1, [@typed={0x8, 0x10c, 0x0, 0x0, @uid=0xee00}]}, @typed={0x8, 0x3b, 0x0, 0x0, @ipv4=@multicast2}]}]}, 0x28}], 0x1, 0x0, 0x0, 0x8000}, 0x8880) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r3, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000002500)={&(0x7f0000000340)={0xc0, r5, 0x1, 0x70bd28, 0x0, {}, [@ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}]}, @ETHTOOL_A_FEATURES_WANTED={0x94, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x90, 0x3, 0x0, 0x1, [{0x8c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x84, 0x2, '\x00\x91P{5\x057\x97:\xf1\xa0\x9fj\n\"\xf8\xcf\\\xc6/\xed\xe9\xe3Z\x9c\x8bK(\v|\xc0!\xfe\x04\xa3)\xc2\xb4\xe0j\x9ej)\a\x83~\x0e\x13\xaaF\x00\x00\x00\x00\x00\x00\x00o\xfao\xfe\x18\xe2\xbf\x15Q\xe8W*\x85N\x80\t\xd2n\x87\xf1|%.\x94\xea^[\xf37\xab\x9a\xf0 \xd3\x94H\x05\x1a\n8\xe95w\a0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x14, 0x27, 0x1, 0x70bd2b, 0x25dfdbfc, {0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x4) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000940)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x12}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x3c}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x300}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_LINK={0x8, 0x5, r8}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x4c}}, 0x0) 1.745844503s ago: executing program 4 (id=4207): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x3032, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="9feb01001800000000000000140000001400000003000000000000000100000d0000000002000000030000000061002d5db6ceb330315606658689"], &(0x7f0000000f40)=""/4089, 0x2f, 0xff9, 0x1, 0x80000000}, 0x28) r1 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socket$netlink(0x10, 0x3, 0x4) r4 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r4, 0x0, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32, @ANYBLOB="01000000000000001c0012000c000100626f"], 0x3c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c00000010001fff000080000100000000000000", @ANYRES64=r2, @ANYRES8=0x0, @ANYRES32], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x804) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000002fc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f0000002900)=r6, 0x4) bind$netlink(r5, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x4) sendmsg$IPVS_CMD_SET_INFO(r8, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r8, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0xffffffffffffffba) sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="4c00000010001fff000000008000000000400000", @ANYRES32=0x0, @ANYBLOB, @ANYRES32=r9, @ANYBLOB="240012800b000100627269646765"], 0x4c}, 0x1, 0x0, 0x0, 0x20488c4}, 0x40000) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000900)={'bridge0\x00', @remote}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r10, 0x89a1, &(0x7f0000000900)={'bridge0\x00', @broadcast}) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000008c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000980)={&(0x7f00000000c0)=ANY=[@ANYBLOB="44000000eaa08f69f525b3bb1131d935f16ed8eea966cbe5c69363e84306b2450a488278f4df18a136ead688d27376836d9968e990ba44c6ebc57f21ca919ad5dcd133b85d9927063895aa725312558c96d3657865eb295cc06f14ef3dfae374089945517def2fb77af537183627ba6fb9c4db04943c0b0ddaabf50b3c1c3cdcb3fe6a1278d3aeb1557090f5fff4d199c9e260847fc30cdb98d339e7602077fafbc836333d63f400ef64514709e6228b2438fb93d6", @ANYRES16, @ANYBLOB="010000000000000000000700000008000300", @ANYRES32=r11, @ANYBLOB="0c0099000400000019000000140004006e6963766630000000000000000000000800050006000000"], 0x44}, 0x1, 0x0, 0x0, 0x48000}, 0x884) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{}, &(0x7f0000000000), &(0x7f0000000080)}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{}, &(0x7f0000000140), &(0x7f0000000180)}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={0x1}, 0x4) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000004c0)={0x0, 0x9, 0x8}, 0xc) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000540)=@o_path={&(0x7f0000000500)='./file0\x00', 0x0, 0x8, r0}, 0x18) 1.633851825s ago: executing program 3 (id=4208): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$TIPC_DEST_DROPPABLE(r2, 0x10f, 0x81, &(0x7f0000000080), 0x4) sendmmsg$inet(r2, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) close(r3) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xc, &(0x7f00000008c0)=ANY=[@ANYBLOB="180200000400000000000000000000008500000041000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000680)={r4, 0x0, 0xe, 0x0, &(0x7f0000000480)="2d7372cf5f1951927e47676e0216", 0x0, 0x100700, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000940)=ANY=[@ANYBLOB="3c0000001000010400000000009028f92eea6c86", @ANYRES32=0x0, @ANYBLOB="0000000012000000140012800b00010062726964676500000400028008000a00", @ANYRES32=r6, @ANYBLOB], 0x3c}}, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x80800) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000780)=ANY=[@ANYBLOB="18000000010000000000000080580000955fd99054d1515fba308ae8dc96cf37ba3a4341dea023c788cb45ddfa74c5405f20b1bd11df92210a30268f6be0ef76b9feb2191f2ec2b5542c5a9ebd784cbe2a210745c82e49"], &(0x7f0000000000)='GPL\x00', 0xc}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0xf, &(0x7f00000002c0)=ANY=[@ANYBLOB="3448afe592870000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b70200000200000085000000b9000000b70000000000000095"], &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x3e, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r7, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x27cf00, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket$unix(0x1, 0x1, 0x0) socket$kcm(0x11, 0x3, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r11 = socket(0x400000000010, 0x3, 0x0) r12 = socket$unix(0x1, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r11, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd0a, 0x25dfdbff, {0x0, 0x0, 0x0, r13, {0x0, 0x4}, {0xffff, 0xffff}, {0xfff2, 0xfff1}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route_sched(r11, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=@newtfilter={0x7c, 0x2c, 0xd27, 0x70bd26, 0x25dfdbfe, {0x0, 0x0, 0x0, r10, {0xb, 0xfff3}, {}, {0x7}}, [@filter_kind_options=@f_matchall={{0xd}, {0x48, 0x2, [@TCA_MATCHALL_ACT={0x44, 0x2, [@m_skbedit={0x40, 0x1, 0x0, 0x0, {{0xc}, {0x14, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0xfff2, 0x4}}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0x2}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x7c}, 0x1, 0x0, 0x0, 0x810}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) 1.612152849s ago: executing program 2 (id=4209): syz_emit_ethernet(0x6a, &(0x7f0000000200)=ANY=[@ANYBLOB="aaaaaaaaaaaa302bd0ac46a208104500005c000000000033907800000000ffffffff000000000048907803000000040000001fa3883e21cd040100035c9b000031d14c91cf0d355081896e447a58f2e6a88933307fb477ae5a40740446707740eb6dcb6c5545363eff42"], 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000200)=@in6={0xa, 0x0, 0x0, @dev}, 0x80, &(0x7f0000000300), 0x0, &(0x7f0000000340)}, 0x21) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000001540)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0xa080}, 0xc, &(0x7f0000001500)={&(0x7f0000000300)=ANY=[@ANYBLOB="180000005600000325bd7000fcdbdf25070000", @ANYRES32=0x0, @ANYBLOB="e8495f118accdfb94aa069e0f579029368f4d46af24de42ed08ea392b5215e50821d21f09e8c5f67725e770d6f0a1309f8a138557b9be7464bcc94a782dae79a37fa1c65e6570b16ba2accf9ba0d4c7d077b0680b389dea3e412e08ad0576d79886acc6341c39bad6a53131bc22e06ab3b1d7b8f19018820d471951a7833dfc499"], 0x18}, 0x1, 0x0, 0x0, 0x10}, 0x40000) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="1c00000015000103000000000000e7ff0b00000008000100", @ANYRES64=r2], 0x1c}, 0x1, 0x0, 0x0, 0x4001}, 0x4000000) sendmsg$NLBL_UNLABEL_C_STATICADD(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002}, 0x0) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000480), 0xffffffffffffffff) recvmmsg(0xffffffffffffffff, &(0x7f0000007d80)=[{{0x0, 0x0, &(0x7f0000002640)=[{0x0}, {&(0x7f0000001440)=""/100, 0x64}], 0x1000000000000053}, 0xfffe}], 0x1, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000001740)=[{{0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000400)=""/4095, 0xfff}], 0x1}}], 0x1, 0x2, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r5, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x5, 0x0, 0x0, 0x60ff78ce1cb3c070}, 0x94) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000000)=ANY=[@ANYRES16=r4, @ANYRES16=r0, @ANYRES64=r3], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x10, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x5, 0x0, 0x0, 0x0, 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) recvmmsg(r5, &(0x7f0000000940)=[{{0x0, 0x0, &(0x7f0000000540), 0x2}, 0x3}], 0x4000048, 0x0, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_FLUSH(r8, 0x29, 0xd4, &(0x7f0000000040), 0x4) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl802154(&(0x7f00000005c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r9, 0x8933, &(0x7f0000000980)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_CHANNEL(r7, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000640)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="110a28bd7000fddbdf6509000000050008000300000008000300", @ANYRES32=r11, @ANYBLOB="050007"], 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 1.4527161s ago: executing program 1 (id=4210): ioctl$XFS_IOC_START_COMMIT(0xffffffffffffffff, 0x80585882, &(0x7f0000000040)) (async) ioctl$XFS_IOC_START_COMMIT(0xffffffffffffffff, 0x80585882, &(0x7f0000000040)) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000140)=@bpf_lsm={0x18, 0x5, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000000000000000000cb9aeee87910000000000000a700000008000000957e718e313a99aabf149ec964da8d009f20d5ba83e531b4406221d89ada05ba60c3abc2baea4ff009d8fe26300f246a12dd16027eadf97d3bf904eac026d6452f6ed08c26aeba75db7a3be88ff71c79c12cb55669f31899f335506c03ac6541e8db"], &(0x7f0000000100)='GPL\x00', 0xf, 0x0, 0x0, 0x41000, 0x10, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0xb}, 0x94) 1.329858904s ago: executing program 1 (id=4211): bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) close(0xffffffffffffffff) r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg$802154_dgram(r0, &(0x7f0000001f80)={&(0x7f00000018c0)={0x24, @long={0x3, 0x0, {0x200}}}, 0x14, &(0x7f0000001f40)={0x0}, 0x1, 0x0, 0x0, 0x4004894}, 0x0) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f00000000c0)={@dev={0xfe, 0x80, '\x00', 0x25}, 0x8000000, 0x0, 0xff, 0x1, 0x20, 0x4}, 0x20) syz_emit_ethernet(0x4e, &(0x7f00000002c0)=ANY=[@ANYBLOB="e33110495bfdaaaaaaaaaaaa86dd60cb653e00183aff00000000000000000000000000000000fe8000000000000000000000000000aa87009078fe8800000000000000000100000001010400385f"], 0x0) (async) r2 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000180)={'vxcan0\x00', 0x0}) (async) r4 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_j1939(r4, &(0x7f0000000280)={0x1d, r3, 0x1, {0x0, 0x0, 0x1}, 0xfd}, 0x18) (async) bind$can_j1939(r4, &(0x7f0000000100)={0x1d, r5, 0x2, {0x3}}, 0x18) (async) r6 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x20, &(0x7f0000000180)={@mcast1, 0x8000000, 0x0, 0xff, 0x2, 0x7ff, 0xffd}, 0x20) (async) r7 = socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@newqdisc={0x6c, 0x24, 0x4ee4e6a52ff56541, 0x40000, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x3c, 0x2, {{0x6, 0x29, 0x80, 0xf, 0xffffffff, 0x91b1}, [@TCA_NETEM_RATE={0x14, 0x6, {0x2, 0x7, 0x7fffffff}}, @TCA_NETEM_DELAY_DIST={0xa, 0x2, "b718073c8f78"}]}}}]}, 0x6c}}, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000007"], 0x50) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0xd, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b5af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000a000000850000000700000095"], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000005c0)={r10, 0x0, 0xe, 0x0, &(0x7f0000000640)="d9b9547ed3c0021a6fd6a67ab922", 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r11 = socket$inet6(0xa, 0x3, 0x2) connect$inet6(r11, &(0x7f0000000200)={0xa, 0x4e25, 0x0, @empty, 0x7}, 0x1c) sendmmsg(r11, &(0x7f00000092c0), 0x4ff, 0x0) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@ipv6_newrule={0x2c, 0x20, 0x1, 0x70bd27, 0x25dfdbfb, {0xa, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x7, 0x6}, [@FIB_RULE_POLICY=@FRA_FWMARK={0x8, 0xa, 0xff}, @FIB_RULE_POLICY=@FRA_SUPPRESS_IFGROUP={0x8, 0xd, 0x10}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24048860}, 0x0) (async) r13 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0a00b6c80d390bfae6fc001b6bb976000400000004000034e9eb5ab346911fc0a25c3bb90ed16c6996f76b8499cc5b9b28eb3e51e1e5e9b536565fa6e8663298ba86e9dadad997727464be049c46b4f69a309e6fbf5a", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r14 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007b00000018110000", @ANYRES32=r13, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r14}, 0xc) 1.271144131s ago: executing program 1 (id=4212): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000080)={0x0, 0x4, 0x2, 0x0, 0xd, 0x1, 0x0, 0x2, 0x0, 0x5, 0x0, 0xd}, 0xe) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x48, 0x10, 0x421, 0x0, 0x25dfdbfd, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GENEVE_COLLECT_METADATA={0x4}, @IFLA_GENEVE_PORT={0x6, 0x5, 0x4e24}, @IFLA_GENEVE_UDP_CSUM={0x5, 0x8, 0x1}]}}}]}, 0x48}}, 0x0) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x2c, &(0x7f0000000000)=[@in={0x2, 0x0, @broadcast}, @in6={0xa, 0x4e23, 0xfffffffd, @private2={0xfc, 0x2, '\x00', 0x1}, 0x5}]}, &(0x7f0000000240)=0x10) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f0000000300)={r2}, &(0x7f0000000400)=0x8) socket$inet6_sctp(0xa, 0x5, 0x84) (async) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000080)={0x0, 0x4, 0x2, 0x0, 0xd, 0x1, 0x0, 0x2, 0x0, 0x5, 0x0, 0xd}, 0xe) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x48, 0x10, 0x421, 0x0, 0x25dfdbfd, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GENEVE_COLLECT_METADATA={0x4}, @IFLA_GENEVE_PORT={0x6, 0x5, 0x4e24}, @IFLA_GENEVE_UDP_CSUM={0x5, 0x8, 0x1}]}}}]}, 0x48}}, 0x0) (async) shutdown(r0, 0x0) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x2c, &(0x7f0000000000)=[@in={0x2, 0x0, @broadcast}, @in6={0xa, 0x4e23, 0xfffffffd, @private2={0xfc, 0x2, '\x00', 0x1}, 0x5}]}, &(0x7f0000000240)=0x10) (async) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f0000000300)={r2}, &(0x7f0000000400)=0x8) (async) 722.133162ms ago: executing program 2 (id=4213): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xe, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000009110ae000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0xc, &(0x7f0000000480)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000280)=@assoc_value={r2, 0x5}, &(0x7f00000002c0)=0x8) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={0xffffffffffffffff, 0x2000000, 0xd, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b9", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="220000000400000010000000"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r3}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000000000000000000000000001850000000000020000000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffff0, 0x0, 0x0, 0x0, &(0x7f0000000080)}, 0x9a) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000000)={r2, 0x7}, &(0x7f0000000080)=0x8) 566.320557ms ago: executing program 2 (id=4214): socket$inet6_sctp(0xa, 0x1, 0x84) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000300)={0xa, 0x1, 0xfffffffe, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2e}}}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000280)=@gcm_256={{0x303}, "1afc7c14d332bcc6", "a9ba0c85d68723369f51322151d9f41aaa2832bb07cc1e49ad714beac6f1ade8", "49960d8f", "bff2a81527ae4190"}, 0x38) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000200), r1) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000027c0)={0x0, 0x0, &(0x7f0000002780)={&(0x7f00000002c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010029bd7000fbdbdf25010000000c00020000000000000000001c0007801800018008000100", @ANYBLOB="04"], 0x3c}, 0x1, 0x0, 0x0, 0x4000004}, 0x4000) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_RELOAD_REGDB(r4, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)={0x14, r5, 0x1, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008004) sendmsg$NL80211_CMD_SET_NOACK_MAP(r3, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x85002010}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="7b000500", @ANYRES16=r5, @ANYBLOB="020025bd7000fedbdf255700000006009500630000000600950000c10000060095000500000006009500020000000600950006000000060095000100000006009500ff7f0000060095000300000006009500790000000600950002000000"], 0x64}, 0x1, 0x0, 0x0, 0x40000}, 0x8054) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='freezer.state\x00', 0x275a, 0x0) write$cgroup_int(r6, &(0x7f0000000000), 0xffffff6a) socket$inet6_sctp(0xa, 0x6, 0x84) setsockopt$MRT_DEL_VIF(r6, 0x0, 0xcb, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r7 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) pwritev(r7, &(0x7f0000001240)=[{&(0x7f0000000040)="de7e5763", 0x4}], 0x1, 0x2, 0x9) r8 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r7, &(0x7f0000001280)={0x80000008}) ioctl$F2FS_IOC_SET_PIN_FILE(r8, 0x4004f50d, &(0x7f0000000240)) sendfile(r0, r6, 0x0, 0x20000000002) 434.291086ms ago: executing program 1 (id=4215): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r0, &(0x7f00000000c0)={0x1f, @none}, 0x8) getsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, &(0x7f00000002c0)=0x1, &(0x7f0000000300)=0x4) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x10004000}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r6}, &(0x7f0000000280), &(0x7f0000000240)=r3}, 0x20) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r6, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f00000000c0)=r7, 0x4) sendmsg$inet(r5, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_NEW(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="5800000000090101000000000000000000000000100004800800014000000003f70002000c000280050001000000000014000280080001000000000008000200ac1414000800054000db0000090001"], 0x58}}, 0x48044) 426.47408ms ago: executing program 0 (id=4216): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000400000005"], 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000ff90850000007100000018110000", @ANYRES32=r1], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000040)={r2, r0}, 0xc) r3 = socket$nl_audit(0x10, 0x3, 0x9) vmsplice(r0, &(0x7f0000000680)=[{&(0x7f0000000500)="ca4fa2ce8540acba45f43b3b372de937a7c26b9c100f21d71ab890fd0250643d190c351fae58d314ec4abce7a5920104eb2ad4a6f045798060c1f75aeb3a2dfe83d098a6519afe01cd4725a0dee855fb3ff1158fbd5029d173e36e9b21470eb00f5bf7951cdfeaae9cb897c125b0ed6fb152d0fab046c6f400fb78601c64fa0b99", 0x81}, {&(0x7f00000005c0)="83f956e630b19deafa239dba8fd123e561167f9d86a1855e01c4d48f117903fd3df98b5a167af944221993988dbd37a7519833cf663b02cf728aeda8742a1bea104d9872a22669d5ecf4274fde6b29205d5abbe94de917d4d525af647ef655231bc1d7fd4143db00143b2fe7c81961f81fd4aa70f0a550e2e656df178571c8183808fe4190e10a691fd975100cede4cc789ffab7241d45e40a8b38", 0x9b}], 0x2, 0xa) writev(r3, &(0x7f0000000080)=[{&(0x7f0000000000)="9537e720f73e66c2a6003c061246647f95", 0x11}], 0x1) socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x11, 0xf, &(0x7f0000000380)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x80000000}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3f}, {}, {0x7, 0x1, 0xb, 0x9, 0x0, 0x20}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000000c0)='GPL\x00', 0xb, 0x1011, &(0x7f0000000840)=""/4113, 0x41000, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f00000004c0)={&(0x7f0000000040), &(0x7f0000000100)=""/177, &(0x7f0000000280)="4f23dd96e9473c44f9d18b16b3c5d664b17a6b365cb93dfad6b85471585c90ce49f8085f07eabf5e03fbf5eed539bb6d9cfa72f1ac4aff90dfd0561aacd723d00b31ae1525f089b31f0d6cd5187ca84ad47b28bebc8bd74554b97069db56326699326cfa895be8b90907e0a439adcdef800f9d9759ae18c2e7df008b229429aa1ab90a6ad751a9ce540abcfa7c23f8af5e7d638f83f6277f0d2bfa084bf55a6cbc76c99472e759e4f1ef7d31a9c9eeedbbace4ee9ec7d4ffd63511d94d00a82e58250fc8e281a20b550c6c858f3ca7a7a675e91b99e402e4958129e71e595b79693a4837b83e1429f768a5414a63181e894c58", &(0x7f0000000400)="41cf829392f7b07b25783be868f679d23894c8d0c483eec2ad34558decc4ee39ca964b8ebaca8a88148ef5bf2ae63f8e06dd3075aece92684c3ed36ffd84e2808f808673d516d9cdcc1dba97b554e5a9cb9d198e1f03216dc75bc0f0b73e21bdcb0203fac53d27d94710efe01d3f062742da441c65da17834e3ac6063317101487f1b38655e22fa2b09effb17a1ed65b1457f8c4bf51fd8c4f8a3a37c3264b2105a1f7a9ded97bd1ec5bd583874f29cfe776765e3d0bc5b93a7703f6", 0x7, 0x1, 0x4}, 0x38) 185.8508ms ago: executing program 0 (id=4217): unshare(0x2c020400) (async) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) (async) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)={0x114, 0x2d, 0x1, 0x0, 0x25dfdbff, "", [@nested={0x101, 0xf2, 0x0, 0x1, [@typed={0xc, 0x18, 0x0, 0x0, @u64=0xfac08}, @typed={0x14, 0xa, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x16}}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd"]}]}, 0x114}], 0x1, 0x0, 0x0, 0x400c445}, 0x0) (async) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f00000000c0)=[@sack_perm, @sack_perm], 0x2) (async) getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000040)={0x0, 0x9, 0x6, 0x134e}, &(0x7f0000000080)=0x10) sendmmsg$inet6(r0, &(0x7f0000002bc0)=[{{&(0x7f0000000200)={0xa, 0x4e24, 0xffffffff, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x30}, 0x1c, &(0x7f0000001700)=[{&(0x7f0000000140)="b5", 0x1}], 0x1}}, {{&(0x7f0000000100)={0xa, 0x4e20, 0xffffffff, @local, 0x5}, 0x1c, &(0x7f00000006c0)=[{&(0x7f00000001c0)="d7", 0x1}], 0x1}}], 0x2, 0x20044040) (async) r3 = socket$netlink(0x10, 0x3, 0x4) writev(r3, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84476080ffe00600004e20590000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x40b}], 0x1) (async) ioctl$XFS_IOC_BULKSTAT(r1, 0x8040587f, &(0x7f0000000480)={{0xe13, 0x2, 0x1, 0x7fffffff, 0x40}, &(0x7f0000000240)=[{}, {}, {}]}) 150.880223ms ago: executing program 1 (id=4218): r0 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$6lowpan_control(r0, &(0x7f0000000180)='connect aa:aa:aa:aa:aa:11 1', 0x1b) r1 = socket$unix(0x1, 0x1, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000000002000000701a249ccc0a416c5b5683872246adcf0000000000a44be4"], &(0x7f0000000580)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0xc}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x406, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, &(0x7f00000008c0)="5c4d445d8ae29bc1d5b8ad6d8a98459487277ef223bd736900000000baf60280d3d967f1484ac995a4ef9a1a109ea94c36a001ee049132902cfbdaec64e27bda184c5e4c46685d9bb62996e1691b61c4094a66eb6ec09611261b34c2432c0618cc", 0x0}, 0x50) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="010000000300000004000000ff07"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000004580)={0x0, 0x0, &(0x7f00000034c0), &(0x7f0000000300)="d0e53e5352e8c8", 0xcfd8, r4}, 0x38) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000), &(0x7f00000000c0), 0xce4, r4}, 0x38) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00}, 0x94) r9 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r9, 0x89e2, &(0x7f0000000340)={r9}) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x10, 0xb, &(0x7f0000000180)=ANY=[@ANYRES8=0x0], &(0x7f00000000c0)='GPL\x00', 0xfffffffb, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xe, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r12 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$SO_BINDTODEVICE(r12, 0x1, 0x19, &(0x7f0000000200)='batadv_slave_0\x00', 0x10) r13 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r13, 0x8933, &(0x7f0000000240)={'batadv_slave_0\x00', 0x0}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000580)={&(0x7f0000000140)=ANY=[@ANYBLOB="9feb01fb1800000000004000000000000000000003000000001e00"], &(0x7f0000000680)=""/162, 0x1b, 0xa2, 0x0, 0x2}, 0x28) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000300)=ANY=[], 0x50) bind$xdp(r12, &(0x7f0000000340)={0x2c, 0x3, r14, 0x6}, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000480)="d8001c00180081064e81f7050044fd56170d12a0b9b54570", 0x18}], 0x1}, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r9, 0x89e2, &(0x7f0000000040)={r10}) ioctl$sock_kcm_SIOCKCMATTACH(r9, 0x89e3, &(0x7f0000000180)={r9, r11}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@delchain={0x2c, 0x65, 0x1, 0x70bd25, 0x25dfdbfc, {0x0, 0x0, 0x0, r8, {0xb, 0xb}, {0x0, 0x8}, {0x0, 0x8}}, [@TCA_CHAIN={0x8, 0xb, 0xbdd}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000050}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001a40)=@newtfilter={0x84, 0x2c, 0xd27, 0x70bd2d, 0x25dfdc00, {0x0, 0x0, 0x0, r6, {0xffff, 0x5}, {}, {0x6, 0x2}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0xd, 0xd601d0c6299a9250, 0x5, 0xefd}}}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) 28.966069ms ago: executing program 4 (id=4219): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r1) sendmsg$nl_generic(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x1c, 0x10, 0x400, 0x0, 0x25dfdbfc, {0xa}, [@typed={0x8, 0x2, 0x0, 0x0, @u32=0x6}]}, 0x1c}}, 0x0) recvmmsg(r1, &(0x7f0000001cc0)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)=""/189, 0xbd}, {&(0x7f00000003c0)=""/152, 0x98}, {&(0x7f0000000480)=""/4091, 0xffb}], 0x3}}, {{&(0x7f0000001480)=@tipc, 0x80, &(0x7f0000001600)=[{&(0x7f0000001500)=""/230, 0xe6}], 0x1, &(0x7f0000001640)=""/224, 0xe0}, 0x9}, {{&(0x7f0000001740)=@qipcrtr, 0x80, &(0x7f0000001840)=[{&(0x7f00000017c0)=""/127, 0x7f}], 0x1, &(0x7f0000001880)=""/222, 0xde}, 0x6}, {{&(0x7f0000001980)=@ethernet={0x0, @local}, 0x80, &(0x7f0000001c80)=[{&(0x7f0000001a00)=""/112, 0x70}, {&(0x7f0000001a80)=""/185, 0xb9}, {&(0x7f0000001b80)=""/83, 0x53}, {&(0x7f0000001c00)=""/73, 0x49}], 0x4}, 0xf4}], 0x4, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r2, 0x1, 0x23, &(0x7f0000000240)=0x100, 0x4) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0xa00) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r4) r6 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FD_FRAMES(r6, 0x65, 0x5, 0x0, &(0x7f00000000c0)) r7 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r7, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1, 0x0, 0x4f5af99b}, 0x1c) sendmmsg$sock(r7, &(0x7f0000000100), 0x0, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010328bd70000000000001000000080001006300000008000300", @ANYRES32=0x0, @ANYBLOB], 0x24}}, 0x44) r8 = socket(0x10, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(r8, 0x10e, 0xc, &(0x7f0000000040)={0x6}, 0x10) sendmsg$NL80211_CMD_GET_SURVEY(r4, 0x0, 0x0) write(r8, &(0x7f0000000280)="1c0000001a009b8a14e5f4070009042400000000ff02000000000000", 0x1e5) syz_genetlink_get_family_id$nl80211(&(0x7f000000b500), r8) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r9, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r9, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) r10 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_l2cap_L2CAP_LM(r10, 0x6, 0x3, &(0x7f0000000340)=0x31, 0x4) setsockopt$inet6_tcp_TCP_ULP(r9, 0x6, 0x1f, &(0x7f00000002c0), 0x4) 0s ago: executing program 3 (id=4220): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001200), 0x8a400, 0x0) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x110e22fff6) (async) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x110e22fff6) ioctl$PPPIOCGDEBUG(r0, 0x80047441, &(0x7f0000000000)) kernel console output (not intermixed with test programs): l) [ 388.796111][T17816] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 388.796130][T17816] Call Trace: [ 388.796207][T17816] [ 388.796282][T17816] dump_stack_lvl+0xe8/0x150 [ 388.796535][T17816] should_fail_ex+0x40c/0x560 [ 388.796630][T17816] _copy_to_user+0x31/0xb0 [ 388.796712][T17816] simple_read_from_buffer+0xe1/0x170 [ 388.796762][T17816] proc_fail_nth_read+0x1bb/0x230 [ 388.796806][T17816] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 388.796837][T17816] ? rw_verify_area+0x24a/0x4c0 [ 388.796876][T17816] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 388.796900][T17816] vfs_read+0x213/0xa80 [ 388.796933][T17816] ? __pfx___mutex_lock+0x10/0x10 [ 388.797031][T17816] ? __pfx_vfs_read+0x10/0x10 [ 388.797059][T17816] ? __fget_files+0x2a/0x420 [ 388.797093][T17816] ? __fget_files+0x3a2/0x420 [ 388.797115][T17816] ? __fget_files+0x2a/0x420 [ 388.797152][T17816] ksys_read+0x150/0x270 [ 388.797182][T17816] ? __pfx_ksys_read+0x10/0x10 [ 388.797208][T17816] ? __pfx_sock_ioctl+0x10/0x10 [ 388.797294][T17816] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 388.797328][T17816] do_syscall_64+0x174/0x580 [ 388.797397][T17816] ? trace_irq_disable+0x3b/0x140 [ 388.797439][T17816] ? clear_bhb_loop+0x40/0x90 [ 388.797462][T17816] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 388.797481][T17816] RIP: 0033:0x7f2108f5e68e [ 388.797504][T17816] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 388.797520][T17816] RSP: 002b:00007f2109e41fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 388.797540][T17816] RAX: ffffffffffffffda RBX: 00007f2109e426c0 RCX: 00007f2108f5e68e [ 388.797554][T17816] RDX: 000000000000000f RSI: 00007f2109e420a0 RDI: 0000000000000005 [ 388.797565][T17816] RBP: 00007f2109e42090 R08: 0000000000000000 R09: 0000000000000000 [ 388.797577][T17816] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 388.797588][T17816] R13: 00007f2109226038 R14: 00007f2109225fa0 R15: 00007fff13e2e158 [ 388.797620][T17816] [ 389.094738][T17822] bond0: left promiscuous mode [ 389.428639][T17846] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3024'. [ 389.540897][T17455] netdevsim netdevsim1 eth4 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 389.666957][T11763] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 389.732664][ T5281] 8021q: adding VLAN 0 to HW filter on device eth3 [ 389.781297][T17857] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3023'. [ 389.795670][T17862] netlink: 'syz.2.3026': attribute type 13 has an invalid length. [ 389.828970][T17862] netlink: 'syz.2.3026': attribute type 17 has an invalid length. [ 389.948868][T17869] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3026'. [ 390.062000][T17455] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 390.206486][T17862] 8021q: adding VLAN 0 to HW filter on device bond0 [ 390.215245][T17862] 8021q: adding VLAN 0 to HW filter on device team0 [ 390.237502][T17862] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 390.292934][T17862] bond_slave_1: left allmulticast mode [ 390.308321][T17862] batadv_slave_1: entered promiscuous mode [ 390.334593][T17862] virt_wifi0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 390.353020][T17862] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 390.372038][T17862] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 390.384775][T17862] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 390.401328][T17862] 8021q: adding VLAN 0 to HW filter on device bond1 [ 390.412204][T17862] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 390.421552][T17862] 8021q: adding VLAN 0 to HW filter on device ipvlan3 [ 390.441552][T17862] 8021q: adding VLAN 0 to HW filter on device bond2 [ 390.547215][T17862] A link change request failed with some changes committed already. Interface vxlan2 may have been left with an inconsistent configuration, please check. [ 390.674639][ T47] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 390.693657][ T47] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 390.743551][ T47] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 390.784461][ T47] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 390.797713][T11763] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 390.867250][T17455] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 390.919140][ T47] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 390.951264][ T47] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 390.966737][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 390.971902][ T47] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 390.997871][ T47] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 391.119869][T17913] netlink: 'syz.0.3034': attribute type 10 has an invalid length. [ 391.134108][T17912] __nla_validate_parse: 1 callbacks suppressed [ 391.134126][T17912] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3035'. [ 391.134205][T17455] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 391.214735][T17914] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3035'. [ 391.219683][T17909] syzkaller0: left promiscuous mode [ 391.229269][T17919] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3035'. [ 391.239432][T17909] syzkaller0: left allmulticast mode [ 391.776812][T17455] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 391.824330][T17455] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 391.859100][T17455] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 391.907450][T17455] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 391.928859][T17943] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3039'. [ 391.930420][T17455] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 391.946690][ T6694] net_ratelimit: 1 callbacks suppressed [ 391.946778][ T6694] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 392.031248][T17455] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 392.045422][T17455] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 392.070201][T17455] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 392.511579][T17455] 8021q: adding VLAN 0 to HW filter on device bond0 [ 392.608791][T17455] 8021q: adding VLAN 0 to HW filter on device team0 [ 392.661967][ T47] bridge0: port 1(bridge_slave_0) entered blocking state [ 392.669184][ T47] bridge0: port 1(bridge_slave_0) entered forwarding state [ 392.791836][T11756] bridge0: port 2(bridge_slave_1) entered blocking state [ 392.799089][T11756] bridge0: port 2(bridge_slave_1) entered forwarding state [ 392.809153][ T6701] wlan1: Trigger new scan to find an IBSS to join [ 393.018972][T17987] netlink: 'syz.3.3048': attribute type 1 has an invalid length. [ 393.040218][T17977] syzkaller0: entered promiscuous mode [ 393.060747][T17977] syzkaller0: entered allmulticast mode [ 393.149363][T11756] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 393.183730][T17993] tipc: Resetting bearer [ 393.442851][T17993] tipc: Resetting bearer [ 393.460257][T17993] batman_adv: batadv0: Interface deactivated: macvlan3 [ 393.470891][T17993] batman_adv: batadv0: Interface deactivated: macvlan4 [ 393.478162][T17993] batadv_slave_1: left allmulticast mode [ 394.266763][T11759] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 394.492524][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 394.503319][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 395.379674][ T14] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 395.498499][T18003] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3052'. [ 395.507619][T18003] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3052'. [ 395.516800][T18003] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3052'. [ 395.591959][ T47] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 395.626437][ T47] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 395.655706][ T47] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 395.676730][ T47] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 395.704973][ T47] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 395.715768][T18016] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3054'. [ 395.733526][ T47] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 395.803845][T18016] ip6gre1: entered promiscuous mode [ 395.833907][T18016] ip6gre1: entered allmulticast mode [ 395.870953][ T47] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 395.902463][ T47] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 395.959149][T18028] tipc: Failed to remove unknown binding: 66,0,0/3956062289:3756466689/3756466691 [ 396.011130][T18028] tipc: Failed to remove unknown binding: 66,0,0/3956062289:3756466689/3756466690 [ 396.062041][T18028] tipc: Failed to remove unknown binding: 66,0,0/3956062289:3756466689/3756466691 [ 396.115883][T18028] tipc: Failed to remove unknown binding: 66,0,0/3956062289:3756466689/3756466690 [ 396.141270][T18047] netlink: 'syz.3.3061': attribute type 1 has an invalid length. [ 396.158040][T18047] netlink: 224 bytes leftover after parsing attributes in process `syz.3.3061'. [ 396.192365][T18043] syzkaller0: entered promiscuous mode [ 396.234724][T18043] syzkaller0: entered allmulticast mode [ 396.500955][T11756] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 396.505461][T18065] netlink: 56 bytes leftover after parsing attributes in process `syz.2.3063'. [ 396.604794][T18067] pimreg1: renamed from bridge0 [ 396.639772][T18067] pimreg1: entered allmulticast mode [ 396.640209][T18073] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3065'. [ 396.670973][T18067] A link change request failed with some changes committed already. Interface pimreg1 may have been left with an inconsistent configuration, please check. [ 396.818349][T18086] netlink: 'syz.3.3064': attribute type 32 has an invalid length. [ 396.844499][T18086] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3064'. [ 396.991570][T18086] bond2: option coupled_control: invalid value (255) [ 397.048320][T11763] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 397.079059][T18086] bond2 (unregistering): Released all slaves [ 397.291379][T18119] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3071'. [ 397.313290][T18119] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3071'. [ 397.571262][T18132] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3073'. [ 397.624321][T17455] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 397.630540][ T47] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 397.683352][T18137] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 397.834501][T17455] veth0_vlan: entered promiscuous mode [ 397.910705][T17455] veth1_vlan: entered promiscuous mode [ 397.973542][T18149] netlink: 56 bytes leftover after parsing attributes in process `syz.4.3078'. [ 397.995578][T17455] veth0_macvtap: entered promiscuous mode [ 398.027638][T17455] veth1_macvtap: entered promiscuous mode [ 398.035080][T18147] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3079'. [ 398.101830][T17455] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 398.130400][T17455] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 398.172248][ T47] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 398.195584][ T47] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 398.228339][ T47] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 398.260489][ T47] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 398.335349][T18167] netlink: 72 bytes leftover after parsing attributes in process `syz.3.3082'. [ 398.424259][T18172] netlink: 'syz.0.3081': attribute type 23 has an invalid length. [ 398.544118][T11763] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 398.544960][T18178] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 398.568228][T11763] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 398.662100][T11763] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 398.681170][T11763] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 398.758405][T11763] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 398.858657][T18193] netlink: 'syz.2.3090': attribute type 39 has an invalid length. [ 398.967513][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 399.448120][ T5628] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 399.470633][ T5628] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 399.479699][ T5628] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 399.494550][ T5628] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 399.507523][ T5628] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 399.521026][T18219] syzkaller0: entered promiscuous mode [ 399.527129][T18219] syzkaller0: entered allmulticast mode [ 399.857263][ T6694] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 399.906629][ T6701] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 400.271575][T18217] bridge0: port 1(bridge_slave_0) entered blocking state [ 400.279098][T18217] bridge0: port 1(bridge_slave_0) entered disabled state [ 400.289944][T18217] bridge_slave_0: entered allmulticast mode [ 400.297843][T18217] bridge_slave_0: entered promiscuous mode [ 400.306736][T18217] bridge0: port 2(bridge_slave_1) entered blocking state [ 400.313980][T18217] bridge0: port 2(bridge_slave_1) entered disabled state [ 400.322184][T18217] bridge_slave_1: entered allmulticast mode [ 400.330959][T18217] bridge_slave_1: entered promiscuous mode [ 400.371388][T18217] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 400.383715][T18217] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 400.426049][T18217] team0: Port device team_slave_0 added [ 400.434629][T18217] team0: Port device team_slave_1 added [ 400.468979][T18217] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 400.483487][T18217] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 400.539862][T18217] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 400.565163][T18217] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 400.579484][T18217] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 400.607281][T18217] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 400.884430][T18217] hsr_slave_0: entered promiscuous mode [ 400.902593][T18217] hsr_slave_1: entered promiscuous mode [ 400.909745][T18217] debugfs: 'hsr0' already exists in 'hsr' [ 400.915503][T18217] Cannot create hsr debugfs directory [ 400.921788][T18266] dummy0: mtu less than device minimum [ 401.038801][ T47] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 401.340311][T18217] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 401.413585][T18217] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 401.434689][T18284] __nla_validate_parse: 12 callbacks suppressed [ 401.434707][T18284] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3106'. [ 401.545765][T18217] team0: Port device netdevsim1 removed [ 401.553248][T18217] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 401.607043][ T4936] Bluetooth: hci2: command tx timeout [ 401.636563][T18217] netdevsim netdevsim0 netdevsim0 (unregistering): left allmulticast mode [ 401.649858][T18217] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 402.087868][ T47] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 402.167647][ T6701] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 402.765854][T18231] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 402.829169][T18217] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 402.879442][T18217] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 402.909711][T18217] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 402.949638][T18288] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3107'. [ 402.975624][T18217] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 402.988217][T18288] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3107'. [ 402.995022][T18217] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 403.017547][T18288] netlink: 'syz.2.3107': attribute type 1 has an invalid length. [ 403.046122][T18217] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 403.083882][T18217] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 403.131074][T18217] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 403.279265][ T6694] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 403.511067][T18217] 8021q: adding VLAN 0 to HW filter on device bond0 [ 403.682629][T18217] 8021q: adding VLAN 0 to HW filter on device team0 [ 403.689634][ T4936] Bluetooth: hci2: command tx timeout [ 403.740669][ T6694] bridge0: port 1(bridge_slave_0) entered blocking state [ 403.747920][ T6694] bridge0: port 1(bridge_slave_0) entered forwarding state [ 403.781709][ T47] bridge0: port 2(bridge_slave_1) entered blocking state [ 403.788975][ T47] bridge0: port 2(bridge_slave_1) entered forwarding state [ 403.803749][T18336] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3115'. [ 403.858332][T18336] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3115'. [ 403.898815][T18333] IPVS: set_ctl: invalid protocol: 2 0.0.0.0:20004 [ 403.975218][T18336] veth15: entered allmulticast mode [ 403.995784][T18341] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3115'. [ 404.231417][T18333] bond13: option packets_per_slave: mode dependency failed, not supported in mode balance-tlb(5) [ 404.281168][T18333] bond13 (unregistering): Released all slaves [ 404.464217][T18341] team_slave_1: left promiscuous mode [ 404.660594][T18341] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 404.674775][T18341] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 404.836763][T18366] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3119'. [ 404.862234][T18341] batman_adv: batadv0: Interface deactivated: gretap2 [ 405.107771][T11759] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 405.154000][T11759] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 405.211694][T11759] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 405.246255][T11759] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 405.278231][T11759] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 405.310052][T11759] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 405.411693][T11759] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 405.441027][T11759] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 405.652139][T18400] syzkaller1: entered promiscuous mode [ 405.678297][T18400] syzkaller1: entered allmulticast mode [ 405.736207][T18408] IPVS: set_ctl: invalid protocol: 41 172.20.20.35:0 [ 405.766890][ T4936] Bluetooth: hci2: command tx timeout [ 406.192243][T18217] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 406.581496][T18217] veth0_vlan: entered promiscuous mode [ 406.582923][ T6701] bond1: (slave erspan0): link status up again after 0 ms [ 406.621743][T18217] veth1_vlan: entered promiscuous mode [ 406.680179][ T6701] bond1: (slave erspan0): failed to get link speed/duplex [ 406.765971][T18436] netlink: 'syz.1.3130': attribute type 6 has an invalid length. [ 406.793790][T18217] veth0_macvtap: entered promiscuous mode [ 406.808222][T18436] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3130'. [ 406.827343][T18217] veth1_macvtap: entered promiscuous mode [ 406.893621][T18217] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 406.958149][T18217] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 407.186043][ T47] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 407.200690][T18461] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3129'. [ 407.230343][ T47] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 407.327274][T11763] bond1: (slave erspan0): failed to get link speed/duplex [ 407.377538][ T47] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 407.393580][ T47] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 407.507063][ T6694] bond1: (slave erspan0): failed to get link speed/duplex [ 407.598045][T18472] xt_hashlimit: max too large, truncated to 1048576 [ 407.656593][T11763] bond1: (slave erspan0): failed to get link speed/duplex [ 407.692082][ T47] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 407.723252][ T47] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 407.758193][T18474] block nbd3: server does not support multiple connections per device. [ 407.784464][T18475] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 407.806759][T18474] block nbd3: shutting down sockets [ 407.842633][T18485] netlink: 14 bytes leftover after parsing attributes in process `syz.4.3140'. [ 407.851792][ T47] bond1: (slave erspan0): failed to get link speed/duplex [ 407.851865][ T4936] Bluetooth: hci2: command tx timeout [ 407.961282][T18493] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3142'. [ 408.116491][T11763] bond1: (slave erspan0): failed to get link speed/duplex [ 408.137797][ T6694] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 408.197217][ T6694] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 408.231467][T18510] netdevsim netdevsim1 €Â: renamed from netdevsim0 (while UP) [ 408.240010][T18511] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3145'. [ 408.288061][ T6694] bond1: (slave erspan0): failed to get link speed/duplex [ 408.441373][ T47] bond1: (slave erspan0): failed to get link speed/duplex [ 408.535863][T18529] sctp: [Deprecated]: syz.0.3093 (pid 18529) Use of int in max_burst socket option. [ 408.535863][T18529] Use struct sctp_assoc_value instead [ 408.572163][T11759] bond1: (slave erspan0): failed to get link speed/duplex [ 408.696881][ T47] bond1: (slave erspan0): failed to get link speed/duplex [ 408.839733][ T47] bond1: (slave erspan0): failed to get link speed/duplex [ 409.042208][ T5628] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 409.060400][ T5628] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 409.070187][ T5628] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 409.081889][ T5628] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 409.089892][ T5628] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 409.317543][T18555] netlink: 56 bytes leftover after parsing attributes in process `syz.3.3152'. [ 409.515376][T18560] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3154'. [ 409.591998][T18562] xt_hashlimit: size too large, truncated to 1048576 [ 410.254065][T18585] netlink: 'syz.4.3160': attribute type 13 has an invalid length. [ 410.288373][T18585] netlink: 'syz.4.3160': attribute type 17 has an invalid length. [ 410.313729][T18585] gre0: left allmulticast mode [ 410.343863][T18585] 8021q: adding VLAN 0 to HW filter on device bond0 [ 410.355317][T18585] 8021q: adding VLAN 0 to HW filter on device team0 [ 410.366494][T18585] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 410.401285][T18585] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 410.416764][T18585] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 410.444340][T18585] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 410.471041][T18585] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 410.493654][T18599] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3160'. [ 410.541339][T18585] veth1_vlan: left promiscuous mode [ 410.553443][T18585] veth0_vlan: left promiscuous mode [ 410.562733][T18585] veth0_vlan: entered promiscuous mode [ 410.574669][T18585] veth1_vlan: entered promiscuous mode [ 410.587263][T18585] veth1_macvtap: left promiscuous mode [ 410.595540][T18585] veth0_macvtap: left promiscuous mode [ 410.603733][T18585] veth0_macvtap: entered promiscuous mode [ 410.620049][T18585] veth1_macvtap: entered promiscuous mode [ 410.650022][T18611] netlink: 'syz.1.3166': attribute type 1 has an invalid length. [ 410.656640][T18612] netlink: 14 bytes leftover after parsing attributes in process `syz.3.3167'. [ 410.669505][T18585] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 410.680512][T18585] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 410.691526][T18585] netdevsim netdevsim4 netdevsim1: left promiscuous mode [ 410.699143][T18585] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 410.711441][T18585] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 410.729667][T18585] hsr1: Slave A (netdevsim0) is not up; please bring it up to get a fully working HSR network [ 410.740052][T18585] hsr1: Slave B (gretap0) is not up; please bring it up to get a fully working HSR network [ 410.757774][T18585] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 410.770919][T18585] batman_adv: batadv0: Interface activated: gretap2 [ 410.784009][T18585] 8021q: adding VLAN 0 to HW filter on device bond1 [ 410.793616][T18585] 8021q: adding VLAN 0 to HW filter on device bond2 [ 410.803655][T18585] 8021q: adding VLAN 0 to HW filter on device bond3 [ 410.812528][T18585] 8021q: adding VLAN 0 to HW filter on device bond4 [ 410.824700][T18585] 8021q: adding VLAN 0 to HW filter on device bond5 [ 410.832365][T18585] bond6: left allmulticast mode [ 410.837663][T18585] 8021q: adding VLAN 0 to HW filter on device bond6 [ 410.845526][T18585] 8021q: adding VLAN 0 to HW filter on device bond7 [ 410.853882][T18585] bond8: left allmulticast mode [ 410.859252][T18585] 8021q: adding VLAN 0 to HW filter on device bond8 [ 410.867998][T18585] 8021q: adding VLAN 0 to HW filter on device bond9 [ 410.877144][T18585] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 410.885420][T18585] 8021q: adding VLAN 0 to HW filter on device macvlan4 [ 410.915912][T18585] 8021q: adding VLAN 0 to HW filter on device bond10 [ 410.930768][T18585] 8021q: adding VLAN 0 to HW filter on device bond12 [ 410.941786][T18585] 8021q: adding VLAN 0 to HW filter on device bond11 [ 410.953803][T18585] bridge5: left allmulticast mode [ 410.977956][T18585] ip6gre1: left promiscuous mode [ 410.982942][T18585] ip6gre1: left allmulticast mode [ 410.990154][ T24] team_slave_1: entered promiscuous mode [ 410.995976][ T24] netdevsim netdevsim4 netdevsim1: entered promiscuous mode [ 411.078066][ T47] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 411.096972][ T47] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 411.117052][ T47] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 411.130197][ T5628] Bluetooth: hci0: command tx timeout [ 411.132868][ T47] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 411.211331][T18611] 8021q: adding VLAN 0 to HW filter on device bond1 [ 411.226262][T18612] team0 (unregistering): Port device team_slave_0 removed [ 411.234289][T18626] netlink: 'syz.0.3170': attribute type 1 has an invalid length. [ 411.243808][T18626] netlink: 'syz.0.3170': attribute type 2 has an invalid length. [ 411.244567][T18612] team0 (unregistering): Port device team_slave_1 removed [ 411.279688][T18613] bond1: (slave gretap1): making interface the new active one [ 411.288597][T18613] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 411.320412][ T47] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 411.344664][ T47] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 411.392826][ T47] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 411.423798][ T47] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 411.585865][T18643] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3173'. [ 411.694215][T18541] bridge0: port 1(bridge_slave_0) entered blocking state [ 411.701938][T18541] bridge0: port 1(bridge_slave_0) entered disabled state [ 411.711620][T18541] bridge_slave_0: entered allmulticast mode [ 411.720135][T18541] bridge_slave_0: entered promiscuous mode [ 411.729403][T18541] bridge0: port 2(bridge_slave_1) entered blocking state [ 411.745795][T18541] bridge0: port 2(bridge_slave_1) entered disabled state [ 411.759506][T18541] bridge_slave_1: entered allmulticast mode [ 411.778353][T18541] bridge_slave_1: entered promiscuous mode [ 411.887679][T18541] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 411.911189][T18541] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 412.012902][T18541] team0: Port device team_slave_0 added [ 412.026272][T18658] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 412.075023][T18541] team0: Port device team_slave_1 added [ 412.180159][T18541] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 412.182420][T18664] __nla_validate_parse: 1 callbacks suppressed [ 412.182439][T18664] netlink: 68 bytes leftover after parsing attributes in process `syz.0.3179'. [ 412.197375][T18541] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 412.256513][T18541] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 412.302406][T18541] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 412.313847][T18541] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 412.367992][T18541] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 412.446870][ T6694] net_ratelimit: 15 callbacks suppressed [ 412.446887][ T6694] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 412.564049][T18670] veth1_to_bond: entered promiscuous mode [ 412.587746][ T6701] bond1: (slave erspan0): failed to get link speed/duplex [ 412.655371][T18541] hsr_slave_0: entered promiscuous mode [ 412.672992][T18541] hsr_slave_1: entered promiscuous mode [ 412.693268][T18541] debugfs: 'hsr0' already exists in 'hsr' [ 412.708169][T18541] Cannot create hsr debugfs directory [ 412.734686][T18675] geneve4: entered promiscuous mode [ 412.920305][T18693] netlink: 68 bytes leftover after parsing attributes in process `syz.3.3185'. [ 412.931744][ T6694] bond1: (slave erspan0): failed to get link speed/duplex [ 412.943421][T18693] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3185'. [ 412.963374][T18693] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3185'. [ 413.019575][T18700] netlink: 'syz.4.3189': attribute type 2 has an invalid length. [ 413.042477][T18700] : entered promiscuous mode [ 413.058980][T11763] bond1: (slave erspan0): failed to get link speed/duplex [ 413.206545][ T5628] Bluetooth: hci0: command tx timeout [ 413.216619][ T6694] bond1: (slave erspan0): failed to get link speed/duplex [ 413.274381][T18541] team0: Port device netdevsim1 removed [ 413.336614][ T6699] bond1: (slave erspan0): failed to get link speed/duplex [ 413.497559][T11759] bond1: (slave erspan0): failed to get link speed/duplex [ 413.608342][ T6699] bond1: (slave erspan0): failed to get link speed/duplex [ 413.636682][ T6699] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 413.716524][ T6701] bond1: (slave erspan0): failed to get link speed/duplex [ 415.286790][ T5628] Bluetooth: hci0: command tx timeout [ 415.729725][T18684] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 415.740202][T18689] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3187'. [ 415.765569][T18541] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 415.817661][T18541] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 415.849583][T18541] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 415.930674][T18541] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 415.962362][T18541] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 415.991826][T18541] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 416.025362][T18541] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 416.059404][T18541] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 416.459067][T18541] 8021q: adding VLAN 0 to HW filter on device bond0 [ 416.540092][T18776] batadv_slave_1: entered promiscuous mode [ 416.560457][T18776] batadv_slave_1: left promiscuous mode [ 416.625449][T18541] 8021q: adding VLAN 0 to HW filter on device team0 [ 416.675498][T11763] bridge0: port 1(bridge_slave_0) entered blocking state [ 416.682745][T11763] bridge0: port 1(bridge_slave_0) entered forwarding state [ 416.722599][ T6699] bridge0: port 2(bridge_slave_1) entered blocking state [ 416.729853][ T6699] bridge0: port 2(bridge_slave_1) entered forwarding state [ 416.750393][T18801] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3210'. [ 416.767041][T18802] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3211'. [ 417.215131][T18817] RDS: rds_bind could not find a transport for ::8000:0:20:0, load rds_tcp or rds_rdma? [ 417.248586][T18817] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3213'. [ 417.261030][T18787] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 417.274272][T18817] Bluetooth: MGMT ver 1.23 [ 417.301242][T18831] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 417.497333][ T6701] net_ratelimit: 85 callbacks suppressed [ 417.497352][ T6701] bond1: (slave erspan0): failed to get link speed/duplex [ 417.579902][T18855] netlink: 240 bytes leftover after parsing attributes in process `syz.4.3221'. [ 417.589383][T18857] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3218'. [ 417.657835][ T6701] bond1: (slave erspan0): failed to get link speed/duplex [ 417.776867][T11759] bond1: (slave erspan0): failed to get link speed/duplex [ 417.776919][T18839] nbd1: detected capacity change from 0 to 63 [ 417.811559][T18849] block nbd1: NBD_DISCONNECT [ 417.851574][T18849] block nbd1: Disconnected due to user request. [ 417.882515][T18849] block nbd1: shutting down sockets [ 417.897257][T11759] bond1: (slave erspan0): failed to get link speed/duplex [ 417.902228][ C0] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 417.913932][ C0] Buffer I/O error on dev nbd1, logical block 0, async page read [ 417.923840][ C0] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 417.933041][ C0] Buffer I/O error on dev nbd1, logical block 1, async page read [ 417.944362][ C0] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 417.953771][ C0] Buffer I/O error on dev nbd1, logical block 2, async page read [ 417.961625][ C0] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 417.970829][ C0] Buffer I/O error on dev nbd1, logical block 3, async page read [ 417.979185][ T1674] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 417.990388][ T1674] Buffer I/O error on dev nbd1, logical block 0, async page read [ 418.001922][ T1674] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 418.015901][ T1674] Buffer I/O error on dev nbd1, logical block 1, async page read [ 418.025287][ T1674] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 418.034694][ T1674] Buffer I/O error on dev nbd1, logical block 2, async page read [ 418.042982][ T1674] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 418.054378][ T1674] Buffer I/O error on dev nbd1, logical block 3, async page read [ 418.063280][ T1674] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 418.072840][ T1674] Buffer I/O error on dev nbd1, logical block 0, async page read [ 418.080998][ T1674] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 418.090392][ T1674] Buffer I/O error on dev nbd1, logical block 1, async page read [ 418.103795][ T5635] ldm_validate_partition_table(): Disk read failed. [ 418.116745][ T5635] Dev nbd1: unable to read RDB block 0 [ 418.116821][T11763] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 418.127861][ T5635] nbd1: unable to read partition table [ 418.141460][T18541] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 418.170197][ T5635] ldm_validate_partition_table(): Disk read failed. [ 418.179346][ T5635] Dev nbd1: unable to read RDB block 0 [ 418.199180][ T5635] nbd1: unable to read partition table [ 418.242915][T18541] veth0_vlan: entered promiscuous mode [ 418.261514][T11763] bond1: (slave erspan0): failed to get link speed/duplex [ 418.304819][T18541] veth1_vlan: entered promiscuous mode [ 418.365554][T18880] syzkaller0: entered promiscuous mode [ 418.402888][T18880] syzkaller0: entered allmulticast mode [ 418.428856][T18882] netlink: 172 bytes leftover after parsing attributes in process `syz.0.3226'. [ 418.464648][T18541] veth0_macvtap: entered promiscuous mode [ 418.502531][T18887] netlink: 'syz.4.3228': attribute type 2 has an invalid length. [ 418.536153][T18541] veth1_macvtap: entered promiscuous mode [ 418.578558][T18885] syzkaller0: entered promiscuous mode [ 418.586535][T18885] syzkaller0: entered allmulticast mode [ 418.606086][T18541] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 418.675723][T18541] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 418.693378][T11759] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 418.711110][T11759] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 418.731150][T18890] lo speed is unknown, defaulting to 1000 [ 418.736111][T11759] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 418.757748][T11759] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 418.783589][T18890] lo speed is unknown, defaulting to 1000 [ 418.820396][T18893] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3230'. [ 418.849636][T18890] lo speed is unknown, defaulting to 1000 [ 418.888657][T11763] bond1: (slave erspan0): failed to get link speed/duplex [ 418.892511][T18890] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 418.938202][T18898] netlink: 84 bytes leftover after parsing attributes in process `syz.1.3232'. [ 418.972273][T18890] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 418.978461][T18898] netlink: 64 bytes leftover after parsing attributes in process `syz.1.3232'. [ 418.998257][T18890] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 419.026069][T18890] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 419.060934][T11763] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 419.078170][ T6699] bond1: (slave erspan0): failed to get link speed/duplex [ 419.097219][T11763] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 419.124371][T18902] syzkaller0: entered promiscuous mode [ 419.141792][T18902] syzkaller0: entered allmulticast mode [ 419.178834][T18890] lo speed is unknown, defaulting to 1000 [ 419.223495][ T47] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 419.233048][T18890] lo speed is unknown, defaulting to 1000 [ 419.248950][ T47] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 419.259460][T18890] lo speed is unknown, defaulting to 1000 [ 419.260116][ T6701] bond1: (slave erspan0): failed to get link speed/duplex [ 419.291627][T18890] lo speed is unknown, defaulting to 1000 [ 419.308543][ T6701] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 419.346494][T18890] lo speed is unknown, defaulting to 1000 [ 419.368146][T18909] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3235'. [ 419.371524][T18890] lo speed is unknown, defaulting to 1000 [ 419.400917][T18890] lo speed is unknown, defaulting to 1000 [ 419.407438][T18909] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3235'. [ 419.470426][T18917] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3149'. [ 419.500037][T18916] netlink: 'syz.3.3237': attribute type 4 has an invalid length. [ 419.526932][T18919] netlink: 'syz.3.3237': attribute type 4 has an invalid length. [ 419.567543][T18919] netlink: 'syz.3.3237': attribute type 4 has an invalid length. [ 419.733532][T18929] bridge0: port 2(bridge_slave_1) entered disabled state [ 419.741414][T18929] bridge0: port 1(bridge_slave_0) entered disabled state [ 419.997993][ T4936] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 420.011089][ T4936] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 420.019905][ T4936] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 420.043823][ T4936] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 420.058408][ T4936] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 420.983846][T18940] lo speed is unknown, defaulting to 1000 [ 421.181423][T19012] netlink: 'syz.0.3256': attribute type 1 has an invalid length. [ 421.204789][T19012] netlink: 'syz.0.3256': attribute type 4 has an invalid length. [ 421.347682][T19020] syzkaller0: entered promiscuous mode [ 421.353307][T19020] syzkaller0: entered allmulticast mode [ 421.366091][T19020] netlink: 'syz.3.3258': attribute type 2 has an invalid length. [ 421.398049][T19020] : entered promiscuous mode [ 422.090711][ T4936] Bluetooth: hci1: command tx timeout [ 422.652760][ C0] net_ratelimit: 17 callbacks suppressed [ 422.652774][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 422.681588][T11763] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 423.800481][ T6694] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 424.176450][ T4936] Bluetooth: hci1: command tx timeout [ 424.450966][T19034] lo speed is unknown, defaulting to 1000 [ 424.457862][T11759] bond1: (slave erspan0): failed to get link speed/duplex [ 424.612782][T19066] __nla_validate_parse: 7 callbacks suppressed [ 424.612800][T19066] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3265'. [ 424.897671][T19085] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3269'. [ 424.921564][T11759] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 424.937646][ T47] bond1: (slave erspan0): failed to get link speed/duplex [ 425.038160][T18940] bridge0: port 1(bridge_slave_0) entered blocking state [ 425.070013][T18940] bridge0: port 1(bridge_slave_0) entered disabled state [ 425.097916][T18940] bridge_slave_0: entered allmulticast mode [ 425.118139][T18940] bridge_slave_0: entered promiscuous mode [ 425.137039][T18940] bridge0: port 2(bridge_slave_1) entered blocking state [ 425.153707][T18940] bridge0: port 2(bridge_slave_1) entered disabled state [ 425.167243][T18940] bridge_slave_1: entered allmulticast mode [ 425.179239][T18940] bridge_slave_1: entered promiscuous mode [ 425.231605][T19099] syzkaller0: entered promiscuous mode [ 425.249661][T19099] syzkaller0: entered allmulticast mode [ 425.362633][T19115] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3275'. [ 425.433589][T18940] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 425.459556][T18940] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 425.585155][T18940] team0: Port device team_slave_0 added [ 425.615545][T18940] team0: Port device team_slave_1 added [ 425.724446][T13324] IPVS: starting estimator thread 0... [ 425.764996][T18940] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 425.782426][T18940] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 425.830885][T18940] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 425.843662][T18940] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 425.853043][T19135] IPVS: using max 29 ests per chain, 69600 per kthread [ 425.860166][T18940] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 425.860787][ T5636] block nbd1: Receive control failed (result -32) [ 425.897106][ T4936] block nbd1: Receive control failed (result -32) [ 425.903829][ T5628] block nbd1: Receive control failed (result -32) [ 425.931150][T18940] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 425.958410][T19140] sctp: [Deprecated]: syz.1.3280 (pid 19140) Use of struct sctp_assoc_value in delayed_ack socket option. [ 425.958410][T19140] Use struct sctp_sack_info instead [ 425.967333][T19141] x_tables: duplicate underflow at hook 3 [ 426.106757][T11759] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 426.115573][T19143] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3282'. [ 426.126548][ T6694] bond1: (slave erspan0): failed to get link speed/duplex [ 426.144578][T18940] hsr_slave_0: entered promiscuous mode [ 426.156817][T19143] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3282'. [ 426.172262][T18940] hsr_slave_1: entered promiscuous mode [ 426.190072][T18940] debugfs: 'hsr0' already exists in 'hsr' [ 426.212155][T18940] Cannot create hsr debugfs directory [ 426.247851][ T5628] Bluetooth: hci1: command tx timeout [ 426.312590][T19145] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3283'. [ 426.410923][T19148] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3284'. [ 426.936468][ T6694] bond1: (slave erspan0): failed to get link speed/duplex [ 427.099681][T19158] Cannot find add_set index 2 as target [ 427.106669][T11759] bond1: (slave erspan0): failed to get link speed/duplex [ 427.199559][T18940] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 427.217803][T19168] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3289'. [ 427.230481][T18940] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 427.515491][T19182] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3293'. [ 427.590495][T18940] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 427.617543][T18940] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 427.662328][T19186] net_ratelimit: 1 callbacks suppressed [ 427.662344][T19186] IPVS: fo: FWM 3 0x00000003 - no destination available [ 427.675382][T11763] bond1: (slave erspan0): failed to get link speed/duplex [ 427.806079][T18940] team0: Port device netdevsim1 removed [ 427.840187][T18940] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 427.879005][T18940] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 428.037057][T11763] bond1: (slave erspan0): failed to get link speed/duplex [ 428.094672][T18940] netdevsim netdevsim4 netdevsim0 (unregistering): left promiscuous mode [ 428.105031][T18940] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 428.120867][T18940] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 428.189173][T19204] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 428.202771][T19204] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3298'. [ 428.266769][ T47] bond1: (slave erspan0): failed to get link speed/duplex [ 428.336692][ T5628] Bluetooth: hci1: command tx timeout [ 428.348884][T11763] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 428.480811][T19213] bridge1: entered promiscuous mode [ 428.488870][T19213] bridge1: entered allmulticast mode [ 428.536961][ T6701] bond1: (slave erspan0): failed to get link speed/duplex [ 428.555380][T18940] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 428.582287][T18940] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 428.598879][T18940] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 428.614494][T18940] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 428.624148][T18940] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 428.652196][T18940] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 428.669473][T18940] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 428.681766][T18940] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 428.726686][T11759] bond1: (slave erspan0): failed to get link speed/duplex [ 428.845958][T18940] 8021q: adding VLAN 0 to HW filter on device bond0 [ 428.886634][T11759] bond1: (slave erspan0): failed to get link speed/duplex [ 428.915891][T18940] 8021q: adding VLAN 0 to HW filter on device team0 [ 428.946684][ T6699] bridge0: port 1(bridge_slave_0) entered blocking state [ 428.953808][ T6699] bridge0: port 1(bridge_slave_0) entered forwarding state [ 428.974323][ T6699] bridge0: port 2(bridge_slave_1) entered blocking state [ 428.981564][ T6699] bridge0: port 2(bridge_slave_1) entered forwarding state [ 429.036731][ T6694] bond1: (slave erspan0): failed to get link speed/duplex [ 430.054947][T19302] x_tables: duplicate entry at hook 2 [ 430.171307][T19307] tipc: Started in network mode [ 430.183910][T19307] tipc: Node identity 9e496460e83, cluster identity 4711 [ 430.211482][T19307] tipc: Enabled bearer , priority 0 [ 430.245090][T18940] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 430.272637][T19311] __nla_validate_parse: 7 callbacks suppressed [ 430.272657][T19311] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3320'. [ 430.296115][T19313] netlink: 'syz.1.3322': attribute type 1 has an invalid length. [ 430.363635][T19307] syzkaller0: entered promiscuous mode [ 430.370028][T19307] syzkaller0: entered allmulticast mode [ 430.376824][T19307] tipc: Resetting bearer [ 430.517751][T19319] macvtap1: entered allmulticast mode [ 430.601845][T19307] macvtap2: entered allmulticast mode [ 430.712930][T19313] bond2: (slave bridge2): making interface the new active one [ 430.728524][T19313] bond2: (slave bridge2): Enslaving as an active interface with an up link [ 430.890275][ T6699] tipc: Resetting bearer [ 430.903305][T19305] tipc: Resetting bearer [ 431.172498][T19353] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3326'. [ 432.796823][ T6701] net_ratelimit: 14 callbacks suppressed [ 432.796844][ T6701] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 433.273857][T19305] tipc: Disabling bearer [ 433.289808][T19342] vlan2: entered promiscuous mode [ 433.295796][T19342] gretap0: entered promiscuous mode [ 433.311815][ T11] tipc: Node number set to 1987667040 [ 433.390801][T18940] veth0_vlan: entered promiscuous mode [ 433.407549][T18940] veth1_vlan: entered promiscuous mode [ 433.427325][ T6699] bond1: (slave erspan0): failed to get link speed/duplex [ 433.456994][T18940] veth0_macvtap: entered promiscuous mode [ 433.468145][T18940] veth1_macvtap: entered promiscuous mode [ 433.491866][T18940] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 433.512417][T18940] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 433.529693][ T6699] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 433.539720][ T6699] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 433.557637][ T6699] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 433.571420][ T6699] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 433.611995][T11763] bond1: (slave erspan0): failed to get link speed/duplex [ 433.654378][T19330] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 433.775773][ T47] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 433.790255][T11756] bond1: (slave erspan0): failed to get link speed/duplex [ 433.833128][ T47] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 433.925584][ T6699] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 433.975380][T11763] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 433.984749][ T47] bond1: (slave erspan0): failed to get link speed/duplex [ 433.995857][T11763] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 434.116816][ T6699] bond1: (slave erspan0): failed to get link speed/duplex [ 434.211363][T19375] sctp: [Deprecated]: syz.2.3337 (pid 19375) Use of struct sctp_assoc_value in delayed_ack socket option. [ 434.211363][T19375] Use struct sctp_sack_info instead [ 434.247808][T11756] bond1: (slave erspan0): failed to get link speed/duplex [ 434.377113][T11756] bond1: (slave erspan0): failed to get link speed/duplex [ 434.506836][T11756] bond1: (slave erspan0): failed to get link speed/duplex [ 434.734041][T19401] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3343'. [ 434.891253][T19400] bridge0: port 2(bridge_slave_1) entered disabled state [ 434.899008][T19400] bridge0: port 1(bridge_slave_0) entered disabled state [ 434.978972][T19400] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 435.009642][T19400] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 435.157279][T19400] vlan2: left promiscuous mode [ 435.162178][T19400] gretap0: left promiscuous mode [ 435.177032][ T6701] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 435.201770][ T6701] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 435.306388][ T6701] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 435.341095][ T6701] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 435.978225][T19461] netlink: 64 bytes leftover after parsing attributes in process `syz.4.3359'. [ 436.083794][T19461] nbd3: detected capacity change from 0 to 3 [ 436.130205][T16877] buffer_io_error: 138 callbacks suppressed [ 436.130302][T16877] Buffer I/O error on dev nbd3, logical block 1, async page read [ 436.193495][ T5628] block nbd3: Receive control failed (result -104) [ 436.300122][T19479] netlink: 184 bytes leftover after parsing attributes in process `syz.2.3367'. [ 436.328086][T19479] netlink: 404 bytes leftover after parsing attributes in process `syz.2.3367'. [ 436.356899][T19479] netlink: 404 bytes leftover after parsing attributes in process `syz.2.3367'. [ 436.409602][T19479] syzkaller0: entered promiscuous mode [ 436.423018][T19479] syzkaller0: entered allmulticast mode [ 436.701108][T19506] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3373'. [ 436.714216][T19506] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3373'. [ 436.872237][T19514] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3376'. [ 436.883900][T19486] netlink: 616 bytes leftover after parsing attributes in process `syz.1.3365'. [ 437.004496][T19518] can: request_module (can-proto-0) failed. [ 437.229295][T19530] netlink: 52 bytes leftover after parsing attributes in process `syz.1.3380'. [ 437.238587][T19530] netlink: 52 bytes leftover after parsing attributes in process `syz.1.3380'. [ 437.531883][T19549] xt_bpf: check failed: parse error [ 437.745909][T19562] netlink: 'syz.3.3388': attribute type 32 has an invalid length. [ 437.997601][ T6701] net_ratelimit: 26 callbacks suppressed [ 437.997620][ T6701] bond1: (slave erspan0): failed to get link speed/duplex [ 438.036035][T19571] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 438.176684][T11756] bond1: (slave erspan0): failed to get link speed/duplex [ 438.306604][T11763] bond1: (slave erspan0): failed to get link speed/duplex [ 438.400782][T11763] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 438.436385][T11763] bond1: (slave erspan0): failed to get link speed/duplex [ 438.577279][T11756] bond1: (slave erspan0): failed to get link speed/duplex [ 438.645801][T19609] netlink: 'syz.3.3401': attribute type 1 has an invalid length. [ 438.719576][T19609] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 438.751702][T19612] netlink: 'syz.0.3403': attribute type 12 has an invalid length. [ 438.787673][T11756] bond1: (slave erspan0): failed to get link speed/duplex [ 438.976433][T11763] bond1: (slave erspan0): failed to get link speed/duplex [ 439.123858][T19627] bond1: entered allmulticast mode [ 439.148904][T19627] 8021q: adding VLAN 0 to HW filter on device bond1 [ 439.219541][T19637] ip6gre1: entered promiscuous mode [ 439.234429][T19637] ip6gre1: entered allmulticast mode [ 439.249514][T11763] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 439.263407][T11763] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 439.275833][T19627] veth1_to_hsr: entered promiscuous mode [ 439.281947][ T5754] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 439.294225][T19627] A link change request failed with some changes committed already. Interface veth1_to_hsr may have been left with an inconsistent configuration, please check. [ 439.468527][ T5754] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 440.020995][T13324] lo speed is unknown, defaulting to 1000 [ 440.027318][T13324] syz2: Port: 1 Link DOWN [ 440.175090][T19689] bridge1: entered promiscuous mode [ 440.190480][T19689] bridge1: entered allmulticast mode [ 440.216738][T19689] team0: Port device bridge1 added [ 440.248733][ T5754] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 440.284648][ T5754] IPVS: starting estimator thread 0... [ 440.403147][T19702] IPVS: using max 34 ests per chain, 81600 per kthread [ 440.643019][T19709] netlink: 'syz.1.3424': attribute type 1 has an invalid length. [ 440.742836][T19711] wireguard0: entered allmulticast mode [ 441.001505][T19730] __nla_validate_parse: 15 callbacks suppressed [ 441.001525][T19730] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3429'. [ 441.571013][T19748] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3433'. [ 441.603751][T19748] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3433'. [ 441.662409][T19758] syzkaller0: entered promiscuous mode [ 441.698800][T19758] syzkaller0: entered allmulticast mode [ 441.751004][T19758] tipc: Enabled bearer , priority 0 [ 441.771003][T19763] syzkaller0: entered promiscuous mode [ 441.778816][T19763] syzkaller0: entered allmulticast mode [ 441.858257][T19769] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3438'. [ 441.881248][T19769] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3438'. [ 441.895977][T19769] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3438'. [ 441.909362][T19772] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3439'. [ 441.918718][T19772] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3439'. [ 441.971791][T19763] bond2 (unregistering): Released all slaves [ 441.999402][T19769] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3438'. [ 442.012460][T19769] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3438'. [ 442.214268][T19752] tipc: Resetting bearer [ 442.265537][T19752] tipc: Disabling bearer [ 442.434911][T19795] netlink: 'syz.4.3441': attribute type 1 has an invalid length. [ 442.599009][T19795] 8021q: adding VLAN 0 to HW filter on device bond1 [ 443.036563][T11763] net_ratelimit: 27 callbacks suppressed [ 443.036584][T11763] bond1: (slave erspan0): failed to get link speed/duplex [ 443.080247][T19826] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 443.446513][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 443.746503][ T47] bond1: (slave erspan0): failed to get link speed/duplex [ 443.863386][T19848] IPVS: Unknown mcast interface: nr0 [ 443.917109][ T6699] bond1: (slave erspan0): failed to get link speed/duplex [ 443.947570][ T6699] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 444.047025][ T47] bond1: (slave erspan0): failed to get link speed/duplex [ 444.095048][T19854] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 444.169067][ T7862] bond1: (slave erspan0): failed to get link speed/duplex [ 444.270030][ T5635] block nbd1: NBD_DISCONNECT [ 444.274255][T19876] netlink: 'syz.2.3466': attribute type 15 has an invalid length. [ 444.303285][ T5635] block nbd1: Send disconnect failed -32 [ 444.331583][T19870] 8021q: adding VLAN 0 to HW filter on device bond3 [ 444.342755][ T5635] block nbd1: Send disconnect failed -32 [ 444.364183][ T5635] block nbd1: Send disconnect failed -32 [ 444.383553][T19871] bond3: (slave batadv1): Opening slave failed [ 444.393923][ T5635] block nbd1: shutting down sockets [ 444.497821][ T47] bond1: (slave erspan0): failed to get link speed/duplex [ 444.626758][ T47] bond1: (slave erspan0): failed to get link speed/duplex [ 444.767815][ T6699] bond1: (slave erspan0): failed to get link speed/duplex [ 444.889003][ T7862] bond1: (slave erspan0): failed to get link speed/duplex [ 445.101440][T19925] bond3: entered promiscuous mode [ 445.150235][T19925] bond3: entered allmulticast mode [ 445.167562][T19925] 8021q: adding VLAN 0 to HW filter on device bond3 [ 445.666020][T19953] bond0: (slave bond_slave_1): Releasing backup interface [ 445.751186][T19962] netlink: 'syz.4.3491': attribute type 4 has an invalid length. [ 445.788642][T19962] netlink: 'syz.4.3491': attribute type 4 has an invalid length. [ 446.037281][T19972] __nla_validate_parse: 19 callbacks suppressed [ 446.037300][T19972] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3495'. [ 446.142183][T19974] lo speed is unknown, defaulting to 1000 [ 446.202667][T19979] netlink: 'syz.4.3498': attribute type 12 has an invalid length. [ 446.236419][T19979] netlink: 'syz.4.3498': attribute type 29 has an invalid length. [ 446.255872][T19979] netlink: 148 bytes leftover after parsing attributes in process `syz.4.3498'. [ 446.274554][T19976] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3497'. [ 446.283791][T19979] netlink: 59 bytes leftover after parsing attributes in process `syz.4.3498'. [ 446.488402][T19996] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3502'. [ 446.506170][T19996] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3502'. [ 446.518969][T19996] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3502'. [ 446.697023][T20006] sit1: entered promiscuous mode [ 446.868014][T20011] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3507'. [ 447.478814][T20034] bond4: invalid ARP target 0.0.0.0 specified for addition [ 447.498011][T20034] bond4: option arp_ip_target: invalid value (0) [ 447.539456][T20034] bond4 (unregistering): Released all slaves [ 447.795290][T20064] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3517'. [ 447.853138][T20053] bond1: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 447.882650][T20066] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3520'. [ 447.924094][T20053] bond1 (unregistering): Released all slaves [ 448.056393][ T7862] net_ratelimit: 23 callbacks suppressed [ 448.056412][ T7862] bond1: (slave erspan0): failed to get link speed/duplex [ 448.174964][T20056] lo speed is unknown, defaulting to 1000 [ 448.222760][T20066] lo speed is unknown, defaulting to 1000 [ 448.407255][T11763] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 448.606989][ T47] bond1: (slave erspan0): failed to get link speed/duplex [ 448.729629][T20100] xt_CT: You must specify a L4 protocol and not use inversions on it [ 448.749529][T13324] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 448.961559][ T7862] bond1: (slave erspan0): failed to get link speed/duplex [ 449.052717][T20113] bridge0: port 3(vlan2) entered blocking state [ 449.075572][T20113] bridge0: port 3(vlan2) entered disabled state [ 449.112961][T20113] vlan2: entered allmulticast mode [ 449.135366][T20113] geneve0: entered allmulticast mode [ 449.155890][T20113] vlan2: entered promiscuous mode [ 449.165761][T20113] geneve0: entered promiscuous mode [ 449.218566][ T7862] bond1: (slave erspan0): failed to get link speed/duplex [ 449.336682][T11763] bond1: (slave erspan0): failed to get link speed/duplex [ 449.459534][ T47] bond1: (slave erspan0): failed to get link speed/duplex [ 449.527250][ T47] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 449.617337][T20136] bridge1: left promiscuous mode [ 449.646762][ T47] bond1: (slave erspan0): failed to get link speed/duplex [ 449.766995][T13324] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 449.778758][T11763] bond1: (slave erspan0): failed to get link speed/duplex [ 450.035740][T20149] ip6erspan0: entered allmulticast mode [ 450.268554][T20159] --map-set only usable from mangle table [ 450.377860][T20161] bond2 (unregistering): Released all slaves [ 451.828522][T20107] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 451.841285][T20139] __nla_validate_parse: 8 callbacks suppressed [ 451.841301][T20139] netlink: 252 bytes leftover after parsing attributes in process `syz.3.3542'. [ 451.900162][T20142] netlink: 252 bytes leftover after parsing attributes in process `syz.3.3542'. [ 452.086479][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 452.111103][T20187] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3554'. [ 452.136018][T20187] netlink: 'syz.4.3554': attribute type 2 has an invalid length. [ 452.164977][T20187] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3554'. [ 452.187776][T20183] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3554'. [ 452.220249][T20183] netlink: 'syz.4.3554': attribute type 2 has an invalid length. [ 452.267317][T20183] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3554'. [ 452.295809][T20200] netlink: 'syz.2.3558': attribute type 30 has an invalid length. [ 452.492283][T20210] netlink: 140 bytes leftover after parsing attributes in process `syz.2.3561'. [ 452.511583][T20210] netlink: 56 bytes leftover after parsing attributes in process `syz.2.3561'. [ 452.745198][T20231] netlink: 'syz.4.3567': attribute type 6 has an invalid length. [ 452.829757][T20234] syzkaller0: entered promiscuous mode [ 452.835776][T20234] syzkaller0: entered allmulticast mode [ 452.846050][T20230] syzkaller0: entered promiscuous mode [ 452.853288][T20230] syzkaller0: entered allmulticast mode [ 452.906956][T20237] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3570'. [ 452.950369][T18541] cgroup: fork rejected by pids controller in /syz2 [ 453.235107][T20251] netlink: 19 bytes leftover after parsing attributes in process `syz.4.3574'. [ 453.276366][T20215] net_ratelimit: 47 callbacks suppressed [ 453.276383][T20215] bond1: (slave erspan0): failed to get link speed/duplex [ 453.566916][T20215] bond1: (slave erspan0): failed to get link speed/duplex [ 453.716499][ T6701] bond1: (slave erspan0): failed to get link speed/duplex [ 453.775884][ T4936] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 453.793503][ T4936] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 453.803465][ T4936] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 453.812563][ T4936] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 453.821108][ T4936] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 453.967201][T20215] bond1: (slave erspan0): failed to get link speed/duplex [ 454.038285][ T6701] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 454.167735][ T6701] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 454.266643][ T6701] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 454.322096][ T6701] bond1: (slave erspan0): failed to get link speed/duplex [ 454.411772][T11751] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 454.547544][T20215] netdevsim netdevsim2 eth4: set [1, 0] type 2 family 0 port 6081 - 0 [ 454.598946][ T6694] bridge_slave_1: left allmulticast mode [ 454.624404][ T6694] bridge_slave_1: left promiscuous mode [ 454.641744][ T6694] bridge0: port 2(bridge_slave_1) entered disabled state [ 454.668640][ T6694] bridge_slave_0: left allmulticast mode [ 454.681116][ T6694] bridge_slave_0: left promiscuous mode [ 454.708861][ T6694] bridge0: port 1(bridge_slave_0) entered disabled state [ 455.097393][ T6694] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 455.118914][ T6694] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 455.147151][ T6694] bond0 (unregistering): Released all slaves [ 455.177165][T11747] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 455.190270][ T6694] bond1 (unregistering): Released all slaves [ 455.247189][ T6701] bond1: (slave erspan0): failed to get link speed/duplex [ 455.464973][T20323] syzkaller0: entered promiscuous mode [ 455.485230][T20323] syzkaller0: entered allmulticast mode [ 455.861616][ T5281] 8021q: adding VLAN 0 to HW filter on device eth1 [ 455.918031][T20265] lo speed is unknown, defaulting to 1000 [ 455.934077][ T5628] Bluetooth: hci0: command tx timeout [ 456.353112][ T7862] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 457.475183][T11750] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 458.014941][ T5628] Bluetooth: hci0: command tx timeout [ 458.579876][T20355] vlan0: entered promiscuous mode [ 458.584979][T20355] bond0: entered promiscuous mode [ 458.590865][T20355] bond_slave_0: entered promiscuous mode [ 458.598923][T20355] bond_slave_1: entered promiscuous mode [ 458.606826][T11747] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 458.758973][ T1155] bond1: (slave erspan0): failed to get link speed/duplex [ 458.874096][ T6694] hsr_slave_0: left promiscuous mode [ 458.899605][ T6694] hsr_slave_1: left promiscuous mode [ 458.914856][ T6694] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 458.931294][ T6694] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 458.996164][T20378] __nla_validate_parse: 4 callbacks suppressed [ 458.996181][T20378] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3602'. [ 459.043750][T20383] netdevsim netdevsim0: Firmware load for './file0/file0/../file0' refused, path contains '..' component [ 459.251263][ T5754] IPVS: starting estimator thread 0... [ 459.275764][T20399] netlink: 420 bytes leftover after parsing attributes in process `syz.4.3605'. [ 459.374087][T20398] IPVS: using max 32 ests per chain, 76800 per kthread [ 459.460006][ T6694] team0 (unregistering): Port device team_slave_1 removed [ 459.480179][ T6694] team0 (unregistering): Port device team_slave_0 removed [ 459.621613][T20407] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3605'. [ 459.714195][T20384] tipc: Enabled bearer , priority 0 [ 459.728461][T11751] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 459.805690][ T5281] 8021q: adding VLAN 0 to HW filter on device eth2 [ 459.834930][T20384] tipc: Disabling bearer [ 459.954922][T20415] netlink: 92 bytes leftover after parsing attributes in process `syz.4.3606'. [ 460.095057][ T5628] Bluetooth: hci0: command tx timeout [ 460.270997][T20431] IPVS: set_ctl: invalid protocol: 1 224.0.0.2:20000 [ 460.331752][T20431] netlink: 64859 bytes leftover after parsing attributes in process `syz.0.3611'. [ 460.355826][T20439] netlink: 'syz.4.3609': attribute type 1 has an invalid length. [ 460.644354][T20449] bond3: (slave gretap1): making interface the new active one [ 460.674602][T20449] bond3: (slave gretap1): Enslaving as an active interface with an up link [ 460.769445][T20448] Bluetooth: MGMT ver 1.23 [ 460.803516][ T6694] IPVS: stop unused estimator thread 0... [ 460.866543][T11747] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 460.936216][T20455] syzkaller0: entered promiscuous mode [ 460.986254][T20455] syzkaller0: entered allmulticast mode [ 460.992736][T20468] ip6t_srh: unknown srh match flags 4000 [ 461.365457][T20265] bridge0: port 1(bridge_slave_0) entered blocking state [ 461.396762][T20265] bridge0: port 1(bridge_slave_0) entered disabled state [ 461.417785][T20265] bridge_slave_0: entered allmulticast mode [ 461.440756][T20265] bridge_slave_0: entered promiscuous mode [ 461.472459][ T5281] 8021q: adding VLAN 0 to HW filter on device eth3 [ 461.583753][T20265] bridge0: port 2(bridge_slave_1) entered blocking state [ 461.591971][T20265] bridge0: port 2(bridge_slave_1) entered disabled state [ 461.599660][T20265] bridge_slave_1: entered allmulticast mode [ 461.610939][T20265] bridge_slave_1: entered promiscuous mode [ 461.764131][T20265] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 461.813977][T20265] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 461.872704][T20505] netlink: 'syz.1.3620': attribute type 61 has an invalid length. [ 462.007363][ T1155] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 462.174059][ T5628] Bluetooth: hci0: command tx timeout [ 462.225089][T20509] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 462.264793][T20509] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 462.524269][T20265] team0: Port device team_slave_0 added [ 462.567518][ T5281] 8021q: adding VLAN 0 to HW filter on device eth4 [ 462.602715][T11747] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 462.637602][T11747] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 462.658401][T20265] team0: Port device team_slave_1 added [ 462.740953][T20527] mac80211_hwsim hwsim33 wlan0: entered promiscuous mode [ 462.798037][T20527] mac80211_hwsim hwsim33 wlan0: entered allmulticast mode [ 462.829304][T11747] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 462.860974][T11747] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 463.073033][T20265] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 463.086844][T20265] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 463.128423][T11747] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 463.143951][T20265] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 463.192007][T20540] syzkaller0: entered promiscuous mode [ 463.198736][T20540] syzkaller0: entered allmulticast mode [ 463.223875][T20265] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 463.261942][T20265] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 463.350558][T20265] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 463.608349][T20265] hsr_slave_0: entered promiscuous mode [ 463.624254][T20265] hsr_slave_1: entered promiscuous mode [ 463.638667][T20265] debugfs: 'hsr0' already exists in 'hsr' [ 463.644482][T20265] Cannot create hsr debugfs directory [ 463.650866][T20557] tipc: Enabled bearer , priority 0 [ 463.665407][T20554] syzkaller0: entered promiscuous mode [ 463.677358][T20554] syzkaller0: entered allmulticast mode [ 463.751799][T20554] tipc: Resetting bearer [ 463.774258][T20564] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3629'. [ 463.792445][T20553] tipc: Resetting bearer [ 463.831510][T20553] tipc: Disabling bearer [ 463.916789][T20564] 8021q: adding VLAN 0 to HW filter on device bond2 [ 463.967164][T20564] 8021q: adding VLAN 0 to HW filter on device bond3 [ 464.238019][T20215] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 464.247580][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 464.550853][T20265] netdevsim netdevsim2 eth4 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 464.565462][T20589] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3636'. [ 464.596098][T20589] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3636'. [ 464.805098][T20265] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 464.919265][T20609] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3641'. [ 464.951572][T20609] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3641'. [ 465.157607][T20265] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 465.349395][T20265] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 465.366677][T20215] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 465.753973][T20655] netlink: 'syz.0.3647': attribute type 1 has an invalid length. [ 465.957952][T20662] netlink: 'syz.0.3649': attribute type 2 has an invalid length. [ 465.995416][T20662] netlink: 1347 bytes leftover after parsing attributes in process `syz.0.3649'. [ 466.151877][T20265] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 466.176817][ T25] block nbd3: Possible stuck request ffff8880275ce000: control (read@0,1024B). Runtime 30 seconds [ 466.204404][T20670] netlink: 108 bytes leftover after parsing attributes in process `syz.3.3650'. [ 466.222085][T20265] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 466.265159][T20265] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 466.315152][T20265] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 466.341196][T20265] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 466.376837][T20265] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 466.400442][T20681] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3652'. [ 466.450835][T20265] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 466.488624][T20265] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 466.508936][T11747] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 466.594489][T20675] lo speed is unknown, defaulting to 1000 [ 466.612483][T20685] netlink: 'syz.4.3653': attribute type 1 has an invalid length. [ 466.729710][T20685] 8021q: adding VLAN 0 to HW filter on device bond4 [ 466.782672][T20685] syzkaller0: entered promiscuous mode [ 466.795034][T20685] syzkaller0: entered allmulticast mode [ 467.302642][T20265] 8021q: adding VLAN 0 to HW filter on device bond0 [ 467.360300][T20265] 8021q: adding VLAN 0 to HW filter on device team0 [ 467.409201][T11751] bridge0: port 1(bridge_slave_0) entered blocking state [ 467.416491][T11751] bridge0: port 1(bridge_slave_0) entered forwarding state [ 467.459008][T11751] bridge0: port 2(bridge_slave_1) entered blocking state [ 467.466328][T11751] bridge0: port 2(bridge_slave_1) entered forwarding state [ 467.626534][T20215] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 468.064965][T20265] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 468.130456][T20265] veth0_vlan: entered promiscuous mode [ 468.144362][T20265] veth1_vlan: entered promiscuous mode [ 468.190203][T20265] veth0_macvtap: entered promiscuous mode [ 468.204843][T20265] veth1_macvtap: entered promiscuous mode [ 468.229663][T20265] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 468.254597][T20265] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 468.274246][ T1155] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 468.291375][ T1155] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 468.326477][ T1155] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 468.338510][ T1155] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 468.736631][T11747] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 469.492843][T20685] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 469.843211][T11747] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 469.859867][T20215] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 469.880697][T11747] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 469.993540][T11747] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 470.005692][T11747] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 470.045562][T20819] netlink: 'syz.4.3664': attribute type 4 has an invalid length. [ 470.749690][T20862] netlink: 'syz.2.3673': attribute type 27 has an invalid length. [ 470.749783][T20861] netlink: 'syz.2.3673': attribute type 27 has an invalid length. [ 470.767229][T20862] netlink: 'syz.2.3673': attribute type 4 has an invalid length. [ 470.804221][T20861] netlink: 'syz.2.3673': attribute type 4 has an invalid length. [ 470.806025][T20862] netlink: 152 bytes leftover after parsing attributes in process `syz.2.3673'. [ 470.844724][T20861] netlink: 152 bytes leftover after parsing attributes in process `syz.2.3673'. [ 471.006540][ T6694] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 471.133324][T20880] netlink: 'syz.2.3677': attribute type 4 has an invalid length. [ 471.148269][T20882] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3678'. [ 471.176050][T20880] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3677'. [ 471.181495][T20885] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3679'. [ 471.203783][T20880] netlink: 'syz.2.3677': attribute type 1 has an invalid length. [ 471.205322][T20885] netlink: 'syz.3.3679': attribute type 10 has an invalid length. [ 471.234048][T20880] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3677'. [ 471.246376][T20885] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3679'. [ 471.269321][T20880] netlink: 'syz.2.3677': attribute type 1 has an invalid length. [ 472.060390][T20908] netlink: 'syz.2.3682': attribute type 15 has an invalid length. [ 472.083328][T20908] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3682'. [ 472.126525][T20215] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 472.418364][T20913] netlink: 5 bytes leftover after parsing attributes in process `syz.3.3683'. [ 472.521361][T20912] lo speed is unknown, defaulting to 1000 [ 472.554257][T20913] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3683'. [ 472.608875][T20926] netlink: 'syz.3.3683': attribute type 4 has an invalid length. [ 472.868640][T20927] syzkaller0: entered promiscuous mode [ 472.880313][T20927] syzkaller0: entered allmulticast mode [ 473.236615][T11750] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 473.274947][T20935] team1: entered promiscuous mode [ 473.291642][T20935] team1: entered allmulticast mode [ 473.305602][T20935] 8021q: adding VLAN 0 to HW filter on device team1 [ 473.395907][T20936] team2: entered promiscuous mode [ 473.406951][T20936] team2: entered allmulticast mode [ 473.420188][T20936] 8021q: adding VLAN 0 to HW filter on device team2 [ 473.607647][T20938] dummy0: entered promiscuous mode [ 473.621876][T20937] dummy0: left promiscuous mode [ 473.972241][T20947] syzkaller0: entered promiscuous mode [ 473.983497][T20947] syzkaller0: entered allmulticast mode [ 474.239983][T20955] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 474.300579][T20957] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 474.376795][T11750] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 474.989703][T20970] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 475.316687][T20979] tipc: Started in network mode [ 475.331957][T20979] tipc: Node identity ac14140f, cluster identity 4711 [ 475.346850][T20979] tipc: New replicast peer: 255.255.255.255 [ 475.372212][T20979] tipc: Enabled bearer , priority 5 [ 475.501482][T20984] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 475.508236][T11747] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 475.732471][T21005] IPv6: Can't replace route, no match found [ 475.749460][T21005] vlan2: entered allmulticast mode [ 475.754727][T21005] gretap0: entered allmulticast mode [ 476.022192][T21018] netlink: 'syz.1.3711': attribute type 1 has an invalid length. [ 476.194986][T21018] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 476.319976][T21036] tipc: Enabling of bearer rejected, already enabled [ 476.398831][T21040] netlink: 'syz.1.3717': attribute type 41 has an invalid length. [ 476.400834][T21042] __nla_validate_parse: 5 callbacks suppressed [ 476.400851][T21042] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3718'. [ 476.460498][T21045] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3718'. [ 476.486665][T13324] tipc: Node number set to 2886997007 [ 476.641116][T21049] can: request_module (can-proto-0) failed. [ 476.669026][T11750] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 476.694960][T21059] batman_adv: batadv0: Adding interface: dummy0 [ 476.717893][T21059] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 476.785758][T21059] batman_adv: batadv0: Interface activated: dummy0 [ 476.838486][T21049] batadv0: mtu less than device minimum [ 476.848685][T21049] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 476.862417][T21049] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 476.874142][T21049] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 476.885932][T21049] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 476.897559][T21049] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 476.909351][T21049] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 476.920950][T21049] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 476.986852][T21064] xfrm1: entered allmulticast mode [ 476.993664][T21075] x_tables: duplicate underflow at hook 1 [ 477.107149][T21087] netlink: 43 bytes leftover after parsing attributes in process `syz.0.3730'. [ 477.457986][T21101] syzkaller0: entered promiscuous mode [ 477.477450][T21101] syzkaller0: entered allmulticast mode [ 477.942389][T21135] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3745'. [ 478.108328][T21145] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3747'. [ 478.164639][T21145] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3747'. [ 478.258195][T21153] bond1: Unable to set peer notification delay as MII monitoring is disabled [ 478.314832][T21153] bond1 (unregistering): Released all slaves [ 478.542208][T21155] 8021q: adding VLAN 0 to HW filter on device bond0 [ 478.565662][T21155] 8021q: adding VLAN 0 to HW filter on device team0 [ 478.594960][T21155] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 478.643607][T21155] veth1_to_bond: left promiscuous mode [ 478.661838][T21155] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 478.672373][T21155] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 478.685959][T21155] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 478.702489][T21155] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 478.721384][T21155] veth1_vlan: left promiscuous mode [ 478.729204][T21155] veth0_vlan: left promiscuous mode [ 478.736102][T21155] veth0_vlan: entered promiscuous mode [ 478.744953][T21155] veth1_vlan: entered promiscuous mode [ 478.774698][T21155] veth1_macvtap: left promiscuous mode [ 478.790065][T21155] veth0_macvtap: left promiscuous mode [ 478.823620][T21155] veth0_macvtap: entered promiscuous mode [ 478.831296][T21155] veth1_macvtap: entered promiscuous mode [ 478.846991][T21155] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 478.857431][T21155] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 478.867379][T21155] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 478.875642][T21155] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 478.888085][T21155] veth1_to_bond: entered promiscuous mode [ 478.929060][ T5754] lo speed is unknown, defaulting to 1000 [ 478.946354][T20215] bridge0: port 1(bridge_slave_0) entered blocking state [ 478.953569][T20215] bridge0: port 1(bridge_slave_0) entered forwarding state [ 478.965934][ T5754] syz2: Port: 1 Link ACTIVE [ 478.985245][T20215] bridge0: port 2(bridge_slave_1) entered blocking state [ 478.992459][T20215] bridge0: port 2(bridge_slave_1) entered forwarding state [ 479.048192][ T1155] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 479.083935][ T1155] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 479.109358][ T1155] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 479.122674][ T1155] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 479.134816][ T1155] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 479.145444][ T1155] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 479.231164][T21189] netlink: 336 bytes leftover after parsing attributes in process `syz.0.3758'. [ 479.231893][ T1155] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 479.240556][T21189] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3758'. [ 479.264740][ T1155] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 479.673151][T21210] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3763'. [ 479.736112][T21214] unsupported nlmsg_type 40 [ 479.821952][T21215] bond4: option xmit_hash_policy: invalid value (10) [ 479.851102][T21215] bond4 (unregistering): Released all slaves [ 480.155060][T21223] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 480.388877][T21235] sock: sock_timestamping_bind_phc: sock not bind to device [ 480.653934][T21247] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3775'. [ 481.025033][T21260] bond1 (unregistering): Released all slaves [ 481.180497][T20215] net_ratelimit: 15 callbacks suppressed [ 481.180515][T20215] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 481.296158][T21278] bridge0: port 2(bridge_slave_1) entered disabled state [ 481.307250][T21278] bridge0: port 1(bridge_slave_0) entered disabled state [ 481.535663][T21292] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 481.664745][T21299] netlink: 'syz.4.3787': attribute type 29 has an invalid length. [ 481.724181][T21301] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 481.805157][T21303] 8021q: adding VLAN 0 to HW filter on device bond4 [ 481.918883][T21303] gretap2: entered allmulticast mode [ 482.121020][T21315] __nla_validate_parse: 2 callbacks suppressed [ 482.121039][T21315] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3794'. [ 482.138878][T21315] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3794'. [ 482.175009][T21318] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3795'. [ 482.317014][T20215] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 482.681230][T21343] netlink: 'syz.2.3798': attribute type 3 has an invalid length. [ 482.745890][T21348] netlink: 56 bytes leftover after parsing attributes in process `syz.4.3801'. [ 482.777622][T21350] netlink: 'syz.0.3803': attribute type 1 has an invalid length. [ 482.789104][T21348] netlink: 156 bytes leftover after parsing attributes in process `syz.4.3801'. [ 483.018768][T21353] syzkaller0: entered promiscuous mode [ 483.041882][T21353] syzkaller0: entered allmulticast mode [ 483.156894][T21354] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3803'. [ 483.495707][T11751] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 483.624091][T21375] netlink: 64 bytes leftover after parsing attributes in process `syz.4.3809'. [ 483.700198][T21376] netlink: 'syz.4.3809': attribute type 1 has an invalid length. [ 483.751621][T21375] netlink: 'syz.4.3809': attribute type 3 has an invalid length. [ 483.770443][T21375] netlink: 3 bytes leftover after parsing attributes in process `syz.4.3809'. [ 484.625770][ T7862] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 485.786054][T11751] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 486.071141][T21350] bond1: (slave bridge3): making interface the new active one [ 486.080379][T21350] bond1: (slave bridge3): Enslaving as an active interface with an up link [ 486.102805][T21354] bond1: entered allmulticast mode [ 486.123750][T21354] bridge3: entered allmulticast mode [ 486.139903][T21354] 8021q: adding VLAN 0 to HW filter on device bond1 [ 486.367726][T21389] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3813'. [ 486.381701][T21389] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3813'. [ 486.473870][T21397] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 486.618509][T21399] erspan0: entered promiscuous mode [ 486.750190][T21413] netlink: 'syz.2.3822': attribute type 1 has an invalid length. [ 486.813541][T21422] netlink: zone id is out of range [ 486.855017][T21422] netlink: zone id is out of range [ 486.862385][T21422] netlink: zone id is out of range [ 486.867965][T21422] netlink: zone id is out of range [ 486.873186][T21422] netlink: zone id is out of range [ 486.881668][T21422] netlink: zone id is out of range [ 486.889015][T21422] netlink: zone id is out of range [ 486.897544][T11751] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 486.899009][T21422] netlink: zone id is out of range [ 486.911548][T21422] netlink: zone id is out of range [ 486.931931][T21413] 8021q: adding VLAN 0 to HW filter on device bond1 [ 486.980695][T21432] ip6tnl2: entered allmulticast mode [ 487.029241][ T6694] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 487.045328][T21415] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-6) [ 487.065139][ T5754] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 487.073834][ T6694] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 487.084555][T21432] syzkaller0: entered promiscuous mode [ 487.103668][T21432] syzkaller0: entered allmulticast mode [ 487.193740][T21435] tipc: Started in network mode [ 487.210079][T21435] tipc: Node identity dae1f3a78211, cluster identity 4711 [ 487.225909][T21435] tipc: Enabled bearer , priority 0 [ 487.241430][T21430] tipc: Resetting bearer [ 487.246026][T21444] __nla_validate_parse: 3 callbacks suppressed [ 487.246045][T21444] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3828'. [ 487.266795][ T5754] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 487.322633][T21430] tipc: Disabling bearer [ 487.562165][T21461] syzkaller1: entered promiscuous mode [ 487.579216][T21461] syzkaller1: entered allmulticast mode [ 487.604215][T21457] netlink: 224 bytes leftover after parsing attributes in process `syz.0.3833'. [ 487.785124][T21475] netlink: 'syz.4.3837': attribute type 13 has an invalid length. [ 487.802216][T21475] netlink: 'syz.4.3837': attribute type 17 has an invalid length. [ 487.853307][ T30] audit: type=1804 audit(1783684470.565:9): pid=21480 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.3837" name="/newroot/112/memory.events" dev="tmpfs" ino=589 res=1 errno=0 [ 487.923182][ T30] audit: type=1800 audit(1783684470.565:10): pid=21480 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.3837" name="memory.events" dev="tmpfs" ino=589 res=0 errno=0 [ 487.968365][ T30] audit: type=1804 audit(1783684470.595:11): pid=21480 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.3837" name="/newroot/112/memory.events" dev="tmpfs" ino=589 res=1 errno=0 [ 488.047932][T21472] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 488.080709][T21472] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 488.086764][ T5628] Bluetooth: hci5: command 0x0406 tx timeout [ 488.097433][ T5754] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 488.401560][T21475] 8021q: adding VLAN 0 to HW filter on device bond0 [ 488.414823][T21475] 8021q: adding VLAN 0 to HW filter on device team0 [ 488.430613][T21475] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 488.471923][T21475] bridge0: port 1(bridge_slave_0) entered blocking state [ 488.479216][T21475] bridge0: port 1(bridge_slave_0) entered listening state [ 488.492906][T21475] bridge0: port 2(bridge_slave_1) entered blocking state [ 488.500194][T21475] bridge0: port 2(bridge_slave_1) entered listening state [ 488.529158][T21475] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 488.562129][T21475] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 488.611221][T21475] veth1_vlan: left promiscuous mode [ 488.620253][T21475] veth0_vlan: left promiscuous mode [ 488.628713][T21475] veth0_vlan: entered promiscuous mode [ 488.638805][T21475] veth1_vlan: entered promiscuous mode [ 488.652794][T21475] veth1_macvtap: left promiscuous mode [ 488.661500][T21475] veth0_macvtap: left promiscuous mode [ 488.669474][T21475] veth0_macvtap: entered promiscuous mode [ 488.685722][T21475] veth1_macvtap: entered promiscuous mode [ 488.701331][T21475] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 488.713559][T21475] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 488.726836][T21475] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 488.739809][T21475] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 488.752751][T21475] mac80211_hwsim hwsim33 wlan0: left promiscuous mode [ 488.760356][T21475] mac80211_hwsim hwsim33 wlan0: left allmulticast mode [ 488.777089][T21475] bridge1: left allmulticast mode [ 488.784295][T21475] 8021q: adding VLAN 0 to HW filter on device bond1 [ 488.797544][T21475] 8021q: adding VLAN 0 to HW filter on device bond2 [ 488.809409][T21475] 8021q: adding VLAN 0 to HW filter on device bond3 [ 488.833943][T21475] 8021q: adding VLAN 0 to HW filter on device bond4 [ 488.852962][T21475] vlan2: left allmulticast mode [ 488.859139][T21475] gretap0: left allmulticast mode [ 488.864924][T21475] xfrm1: left allmulticast mode [ 488.872398][T21475] 8021q: adding VLAN 0 to HW filter on device bond5 [ 489.094829][T21496] netlink: 136 bytes leftover after parsing attributes in process `syz.0.3843'. [ 489.412783][T21512] netlink: 52 bytes leftover after parsing attributes in process `syz.2.3851'. [ 490.135633][T21558] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3863'. [ 490.274159][T21558] syzkaller0: entered promiscuous mode [ 490.283465][T21558] syzkaller0: entered allmulticast mode [ 490.455877][T21581] netlink: 164 bytes leftover after parsing attributes in process `syz.1.3869'. [ 490.491229][T21581] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3869'. [ 491.226533][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 492.563758][T11751] net_ratelimit: 237 callbacks suppressed [ 492.563777][T11751] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 493.710528][T11751] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 494.533701][T21603] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input5 [ 494.577474][T21610] netlink: 'syz.0.3878': attribute type 30 has an invalid length. [ 494.645454][T21616] netlink: 'syz.0.3878': attribute type 30 has an invalid length. [ 494.804431][T21615] lo speed is unknown, defaulting to 1000 [ 494.819436][ T7862] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 495.181870][T21634] netlink: 'syz.3.3885': attribute type 1 has an invalid length. [ 495.247546][T21634] 8021q: adding VLAN 0 to HW filter on device bond4 [ 495.328856][T21640] bond4: (slave veth7): Enslaving as an active interface with a down link [ 495.780055][T21661] sctp: [Deprecated]: syz.4.3889 (pid 21661) Use of int in maxseg socket option. [ 495.780055][T21661] Use struct sctp_assoc_value instead [ 495.798061][T21662] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3890'. [ 495.811713][T21662] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3890'. [ 495.949385][T11747] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 496.255831][ T25] block nbd3: Possible stuck request ffff8880275ce000: control (read@0,1024B). Runtime 60 seconds [ 496.599984][T21690] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 496.611112][T21690] syzkaller1: entered promiscuous mode [ 496.622035][T21690] syzkaller1: entered allmulticast mode [ 496.627657][T21696] netlink: 'syz.4.3901': attribute type 1 has an invalid length. [ 496.652803][T21696] 8021q: adding VLAN 0 to HW filter on device bond6 [ 496.687315][T21696] bond6: (slave geneve2): making interface the new active one [ 496.695810][T21696] bond6: (slave geneve2): Enslaving as an active interface with an up link [ 496.867890][ T6701] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 497.034352][T21714] ipt_REJECT: TCP_RESET invalid for non-tcp [ 497.076669][T11747] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 497.078857][T21709] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3906'. [ 497.156178][T21720] bond5: option tlb_dynamic_lb: mode dependency failed, not supported in mode active-backup(1) [ 497.168078][T21720] bond5 (unregistering): Released all slaves [ 497.441339][T21729] xt_hashlimit: size too large, truncated to 1048576 [ 497.564656][T21729] netlink: 'syz.0.3910': attribute type 1 has an invalid length. [ 497.572968][T21729] netlink: 'syz.0.3910': attribute type 2 has an invalid length. [ 498.177741][T11751] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 499.287638][ T7862] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 499.970950][T21709] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 500.086701][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 500.339539][T21760] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3917'. [ 500.361230][T21762] x_tables: duplicate underflow at hook 2 [ 500.369177][T21760] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3917'. [ 500.408909][ T1155] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 500.449689][T21762] bond7: invalid ARP target 0.0.0.0 specified for addition [ 500.470455][T21762] bond7: option arp_ip_target: invalid value (0) [ 500.486019][T21762] bond7 (unregistering): Released all slaves [ 500.791877][T21793] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3928'. [ 500.840165][T21801] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.3930'. [ 500.844879][T21803] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3928'. [ 500.865197][T21801] openvswitch: netlink: Message has 512 unknown bytes. [ 501.101661][T21801] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 501.125047][T21801] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 501.127259][ T30] audit: type=1804 audit(1783684483.825:12): pid=21814 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.3933" name="/newroot/200/memory.events" dev="tmpfs" ino=1046 res=1 errno=0 [ 501.329075][ T6694] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 501.341886][T21818] netlink: 'syz.2.3931': attribute type 1 has an invalid length. [ 501.356111][T21818] netlink: 756 bytes leftover after parsing attributes in process `syz.2.3931'. [ 501.396342][T21821] netlink: 'syz.4.3934': attribute type 12 has an invalid length. [ 501.504784][T21829] x_tables: duplicate entry at hook 1 [ 501.529759][T21830] netlink: 'syz.0.3938': attribute type 2 has an invalid length. [ 501.560101][ T6701] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 501.580022][T21829] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3937'. [ 502.301286][T21866] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3946'. [ 502.387685][T21872] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3948'. [ 502.419111][T21872] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3948'. [ 502.453536][T21872] syzkaller1: entered promiscuous mode [ 502.467614][T21872] syzkaller1: entered allmulticast mode [ 502.488855][T21872] af_packet: tpacket_rcv: packet too big, clamped from 64993 to 3944. macoff=96 [ 502.709214][T11747] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 502.754240][ T5281] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 502.897930][T21888] netlink: 'syz.1.3952': attribute type 11 has an invalid length. [ 502.992017][T21891] Cannot find add_set index 0 as target [ 503.154507][T21897] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3956'. [ 503.182329][T21897] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3956'. [ 503.200425][T21897] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 503.226813][T21902] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3957'. [ 503.446610][ T5628] Bluetooth: hci3: command 0x0405 tx timeout [ 503.505129][T21920] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 503.866552][T11751] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 503.928677][ C1] bridge0: port 2(bridge_slave_1) entered learning state [ 503.937852][ C1] bridge0: port 1(bridge_slave_0) entered learning state [ 504.133776][T21950] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 504.317693][T21956] bond2 (unregistering): Released all slaves [ 504.592243][T21964] syzkaller1: entered allmulticast mode [ 504.986652][T11751] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 505.050879][T21986] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1303 [ 505.085487][T21984] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1303 [ 505.159937][T21993] tipc: Enabling of bearer rejected, failed to enable media [ 505.278975][T22003] ip6tnl2: entered allmulticast mode [ 505.941862][T22035] __nla_validate_parse: 9 callbacks suppressed [ 505.942687][T22035] netlink: 72 bytes leftover after parsing attributes in process `syz.0.3994'. [ 506.174195][T20216] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 506.761663][T22067] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3998'. [ 507.141923][T22083] netlink: 80 bytes leftover after parsing attributes in process `syz.1.3999'. [ 507.165329][T22085] veth0_to_batadv: entered allmulticast mode [ 507.172559][T22085] A link change request failed with some changes committed already. Interface veth0_to_batadv may have been left with an inconsistent configuration, please check. [ 507.191488][T22085] netlink: 1010 bytes leftover after parsing attributes in process `syz.2.4003'. [ 507.268161][T22078] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4002'. [ 507.376227][T22091] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4005'. [ 507.415527][T22091] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4005'. [ 507.470506][T11750] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 507.837429][T22099] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 507.873571][T22100] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4007'. [ 507.950555][T22103] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 507.957895][T22103] IPv6: NLM_F_CREATE should be set when creating new route [ 507.965191][T22103] IPv6: NLM_F_CREATE should be set when creating new route [ 507.972486][T22103] IPv6: NLM_F_CREATE should be set when creating new route [ 507.995530][T22105] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4009'. [ 508.210006][T22117] netlink: 104 bytes leftover after parsing attributes in process `syz.1.4013'. [ 508.299148][T22124] Bluetooth: MGMT ver 1.23 [ 508.596676][T11746] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 508.677271][T22127] netlink: 'syz.1.4018': attribute type 1 has an invalid length. [ 508.748993][T22127] bond5: entered promiscuous mode [ 508.754605][T22127] 8021q: adding VLAN 0 to HW filter on device bond5 [ 508.803860][T22131] 8021q: adding VLAN 0 to HW filter on device bond5 [ 508.815148][T22131] bond5: (slave gre2): The slave device specified does not support setting the MAC address [ 508.827466][T22131] bond5: (slave gre2): Setting fail_over_mac to active for active-backup mode [ 508.843964][T22131] bond5: (slave gre2): making interface the new active one [ 508.851948][T22131] gre2: entered promiscuous mode [ 508.859892][T22131] bond5: (slave gre2): Enslaving as an active interface with an up link [ 509.068670][T22148] netlink: 'syz.0.4023': attribute type 1 has an invalid length. [ 509.094961][T22148] 8021q: adding VLAN 0 to HW filter on device bond2 [ 509.105908][T22148] bond2: option tlb_dynamic_lb: unable to set because the bond device is up [ 509.303266][T22155] syzkaller0: entered promiscuous mode [ 509.312602][T22155] syzkaller0: entered allmulticast mode [ 509.723938][T22175] veth0_to_bond: default FDB implementation only supports local addresses [ 509.754431][T22176] lo speed is unknown, defaulting to 1000 [ 509.760562][ T7865] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 510.484257][T22213] IPVS: set_ctl: invalid protocol: 2 0.0.0.0:20004 [ 510.543374][T22213] bond3: option packets_per_slave: mode dependency failed, not supported in mode balance-tlb(5) [ 510.565437][T22213] bond3 (unregistering): Released all slaves [ 510.703806][T22219] bridge0: port 2(bridge_slave_1) entered disabled state [ 510.711607][T22219] bridge0: port 1(bridge_slave_0) entered disabled state [ 510.791426][T22230] IPv6: NLM_F_CREATE should be specified when creating new route [ 510.867668][T11758] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 510.873314][T22219] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 510.900284][T22219] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 510.954441][T22235] sctp: [Deprecated]: syz.0.4050 (pid 22235) Use of struct sctp_assoc_value in delayed_ack socket option. [ 510.954441][T22235] Use struct sctp_sack_info instead [ 511.042649][ T7864] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 511.073878][ T7864] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 511.083375][T22232] x_tables: duplicate underflow at hook 1 [ 511.083531][ T7864] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 511.615299][T11761] vlan2: left allmulticast mode [ 511.620735][T11761] geneve0: left allmulticast mode [ 511.625845][T11761] vlan2: left promiscuous mode [ 511.630924][T11761] geneve0: left promiscuous mode [ 511.638651][T11761] bridge0: port 3(vlan2) entered disabled state [ 511.986963][ T7865] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 512.003771][T22246] __nla_validate_parse: 13 callbacks suppressed [ 512.003791][T22246] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4053'. [ 512.158583][T11761] bond3 (unregistering): (slave bridge3): Releasing backup interface [ 512.216455][T11761] bond0 (unregistering): Released all slaves [ 512.226707][T11761] bond1 (unregistering): Released all slaves [ 512.240585][T11761] bond2 (unregistering): Released all slaves [ 512.261363][T11761] bond3 (unregistering): Released all slaves [ 512.274559][T11761] bond4 (unregistering): Released all slaves [ 512.303004][T11761] bond5 (unregistering): Released all slaves [ 512.316983][T11761] bond6 (unregistering): Released all slaves [ 512.331138][T11761] bond7 (unregistering): Released all slaves [ 512.344544][T11761] bond8 (unregistering): Released all slaves [ 512.358692][T11761] bond9 (unregistering): Released all slaves [ 512.558314][T11761] : left promiscuous mode [ 512.683553][T11761] tipc: Disabling bearer [ 512.689754][T11761] tipc: Left network mode [ 513.106578][ T7865] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 513.149646][T11761] hsr_slave_0: left promiscuous mode [ 513.166125][T11761] team0 (unregistering): Port device veth9 removed [ 513.381195][T22202] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 513.629757][T22262] Bluetooth: hci0: Opcode 0x080f failed: -22 [ 513.721912][T22267] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4060'. [ 513.769466][T22263] syzkaller0: entered promiscuous mode [ 513.788184][T22263] syzkaller0: entered allmulticast mode [ 513.811751][T22262] 0: reclassify loop, rule prio 0, protocol 700 [ 513.839079][T22263] sctp: [Deprecated]: syz.4.4057 (pid 22263) Use of int in maxseg socket option. [ 513.839079][T22263] Use struct sctp_assoc_value instead [ 513.938893][T11761] IPVS: stop unused estimator thread 0... [ 514.199070][T22294] syzkaller0: entered promiscuous mode [ 514.214997][T22294] syzkaller0: entered allmulticast mode [ 514.232936][ T7865] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 514.251809][ T6706] tipc: Subscription rejected, illegal request [ 514.275697][T22294] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4067'. [ 514.785749][T22315] blkio.reset_stats is deprecated [ 514.833947][T22317] netlink: 'syz.3.4074': attribute type 4 has an invalid length. [ 515.369274][ T7865] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 515.401700][T22333] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 515.770680][T22349] bridge4: entered promiscuous mode [ 515.780886][T22349] bridge4: entered allmulticast mode [ 515.792205][T22349] team0: Port device bridge4 added [ 515.835295][T22349] bridge5: entered promiscuous mode [ 515.849131][T22349] bridge5: entered allmulticast mode [ 515.872654][T22349] team0: Port device bridge5 added [ 515.923283][T22360] syzkaller0: entered promiscuous mode [ 515.932336][T22360] syzkaller0: entered allmulticast mode [ 515.951439][T22358] tipc: Started in network mode [ 515.966210][T22358] tipc: Node identity 0ec9008639c, cluster identity 4711 [ 515.987892][T22358] tipc: Enabled bearer , priority 0 [ 516.065436][T22363] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4086'. [ 516.106877][T22360] tipc: Resetting bearer [ 516.229501][T22357] tipc: Resetting bearer [ 516.282161][T22357] tipc: Disabling bearer [ 516.415185][T22379] x_tables: duplicate underflow at hook 2 [ 516.498950][ T6706] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 516.527998][T22390] netlink: 'syz.2.4090': attribute type 8 has an invalid length. [ 516.562571][T22389] netlink: 'syz.2.4090': attribute type 8 has an invalid length. [ 516.782301][T22403] Cannot find add_set index 2 as target [ 516.802733][T22404] Bluetooth: MGMT ver 1.23 [ 517.407109][T22429] syzkaller0: entered promiscuous mode [ 517.439600][T22429] syzkaller0: entered allmulticast mode [ 517.497519][T22429] sctp: [Deprecated]: syz.1.4102 (pid 22429) Use of int in maxseg socket option. [ 517.497519][T22429] Use struct sctp_assoc_value instead [ 517.638204][T11741] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 517.945628][T22446] xt_hashlimit: size too large, truncated to 1048576 [ 517.983738][T22448] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4107'. [ 518.006431][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 518.027014][T22448] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4107'. [ 518.038682][T22452] netlink: 'syz.1.4109': attribute type 13 has an invalid length. [ 518.064478][T22452] netlink: 'syz.1.4109': attribute type 17 has an invalid length. [ 518.085998][T22452] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4109'. [ 518.612154][T22481] netlink: 'syz.2.4115': attribute type 1 has an invalid length. [ 518.778987][T11758] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 518.884173][T22499] bridge0: port 1(bridge_slave_0) entered disabled state [ 518.910816][T22499] bridge0: port 2(bridge_slave_1) entered disabled state [ 519.349233][T22526] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 519.556759][T22534] IPv6: NLM_F_CREATE should be specified when creating new route [ 519.727725][T22552] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4131'. [ 519.901300][T22554] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4132'. [ 519.943203][ T7865] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 520.048196][T22569] netlink: 14 bytes leftover after parsing attributes in process `syz.2.4137'. [ 520.163042][T22567] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4137'. [ 521.016010][T22621] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4147'. [ 521.097835][T11762] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 521.350709][T22636] netlink: 4536 bytes leftover after parsing attributes in process `syz.0.4152'. [ 521.598140][T22646] netlink: 'syz.2.4153': attribute type 1 has an invalid length. [ 521.737409][T22655] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4157'. [ 521.767468][T22646] 8021q: adding VLAN 0 to HW filter on device bond3 [ 521.843116][T22651] veth3: entered allmulticast mode [ 521.848986][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 521.897260][T22651] bond3: (slave veth3): Enslaving as an active interface with a down link [ 521.910130][T22660] bond3: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 521.934351][T22646] bond3: entered promiscuous mode [ 521.940864][T22646] bond3: entered allmulticast mode [ 522.094216][T22668] nbd: must specify a size in bytes for the device [ 522.101835][T22673] netlink: 'syz.0.4160': attribute type 1 has an invalid length. [ 522.210608][T22673] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 522.239469][T11758] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 522.523204][T22692] sctp: [Deprecated]: syz.1.4165 (pid 22692) Use of int in maxseg socket option. [ 522.523204][T22692] Use struct sctp_assoc_value instead [ 523.219975][T22710] __nla_validate_parse: 6 callbacks suppressed [ 523.219988][T22710] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4168'. [ 523.291740][T22685] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 523.391061][ T6706] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 523.454762][T22720] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4171'. [ 523.684775][ T6706] netdevsim netdevsim1 €Â: set [0, 0] type 1 family 0 port 8472 - 0 [ 523.694109][ T6706] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 523.752749][ T6706] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 523.766703][ T6706] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 523.790794][ T6706] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 523.831503][ T6706] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 523.859151][ T6706] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 523.878745][ T6706] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 523.931303][ T5628] Bluetooth: hci2: command 0x0406 tx timeout [ 524.222469][T22754] x_tables: duplicate underflow at hook 1 [ 524.325444][T22758] netlink: 'syz.0.4183': attribute type 7 has an invalid length. [ 524.520159][ T6706] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 524.588677][T22762] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4184'. [ 524.616814][T22762] IPv6: NLM_F_CREATE should be specified when creating new route [ 525.382743][T22764] Cannot find set identified by id 0 to match [ 525.391733][T22764] netlink: 'syz.2.4185': attribute type 21 has an invalid length. [ 525.567513][T22772] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 525.573676][T22772] syzkaller1: linktype set to 0 [ 525.626625][T11758] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 525.824996][T22781] netlink: 64 bytes leftover after parsing attributes in process `syz.4.4191'. [ 525.835118][T22784] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4192'. [ 525.845910][T22784] netlink: 'syz.1.4192': attribute type 21 has an invalid length. [ 526.332829][ T25] block nbd3: Possible stuck request ffff8880275ce000: control (read@0,1024B). Runtime 90 seconds [ 526.342140][T22812] xt_time: unknown flags 0xf4 [ 526.742362][T11762] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 526.850433][T22834] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4205'. [ 526.863324][T22836] netlink: 'syz.1.4206': attribute type 1 has an invalid length. [ 526.997054][T22836] bond6: (slave bridge6): Enslaving as a backup interface with an up link [ 527.021883][T22838] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4207'. [ 527.078667][T22844] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4207'. [ 527.103281][T22849] netlink: 'syz.3.4208': attribute type 1 has an invalid length. [ 527.152210][T22844] bridge0: entered allmulticast mode [ 527.216118][T22853] bridge_slave_1: left allmulticast mode [ 527.227922][T22853] bridge_slave_1: left promiscuous mode [ 527.236910][T22853] bridge0: port 2(bridge_slave_1) entered disabled state [ 527.301205][T22853] bridge_slave_0: left allmulticast mode [ 527.316345][T22853] bridge_slave_0: left promiscuous mode [ 527.334641][T22853] bridge0: port 1(bridge_slave_0) entered disabled state [ 527.856892][T11758] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 527.992936][T22873] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4214'. [ 528.243991][T22880] netlink: 'syz.1.4215': attribute type 1 has an invalid length. [ 528.270897][T22880] netlink: 'syz.1.4215': attribute type 2 has an invalid length. [ 528.299444][T22880] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4215'. [ 528.563456][ T4936] block nbd1: Receive control failed (result -1) [ 528.575697][ T4936] [ 528.578064][ T4936] ====================================================== [ 528.582621][T22887] netlink: 224 bytes leftover after parsing attributes in process `syz.0.4217'. [ 528.585115][ T4936] WARNING: possible circular locking dependency detected [ 528.585135][ T4936] syzkaller #0 Not tainted [ 528.585145][ T4936] ------------------------------------------------------ [ 528.612578][ T4936] kworker/u9:1/4936 is trying to acquire lock: [ 528.618723][ T4936] ffff8880123f60e0 (sk_lock-AF_INET6-NBD){+.+.}-{0:0}, at: inet_shutdown+0x6a/0x390 [ 528.628343][ T4936] [ 528.628343][ T4936] but task is already holding lock: [ 528.638049][ T4936] ffff8880800b5a68 (&nsock->tx_lock){+.+.}-{4:4}, at: recv_work+0x1cd9/0x1e10 [ 528.647641][ T4936] [ 528.647641][ T4936] which lock already depends on the new lock. [ 528.647641][ T4936] [ 528.658060][ T4936] [ 528.658060][ T4936] the existing dependency chain (in reverse order) is: [ 528.667067][ T4936] [ 528.667067][ T4936] -> #6 (&nsock->tx_lock){+.+.}-{4:4}: [ 528.674779][ T4936] __mutex_lock+0x19d/0x1550 [ 528.679909][ T4936] nbd_queue_rq+0x373/0x1150 [ 528.685105][ T4936] blk_mq_dispatch_rq_list+0x499/0x1990 [ 528.691217][ T4936] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 528.698136][ T4936] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 528.705176][ T4936] blk_mq_run_work_fn+0x16c/0x300 [ 528.710732][ T4936] process_scheduled_works+0xa8e/0x14e0 [ 528.716830][ T4936] worker_thread+0xa47/0xfb0 [ 528.721934][ T4936] kthread+0x388/0x470 [ 528.726521][ T4936] ret_from_fork+0x514/0xb70 [ 528.731843][ T4936] ret_from_fork_asm+0x1a/0x30 [ 528.737134][ T4936] [ 528.737134][ T4936] -> #5 (&cmd->lock){+.+.}-{4:4}: [ 528.744350][ T4936] __mutex_lock+0x19d/0x1550 [ 528.749457][ T4936] nbd_queue_rq+0xc1/0x1150 [ 528.754484][ T4936] blk_mq_dispatch_rq_list+0x499/0x1990 [ 528.760545][ T4936] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 528.767390][ T4936] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 528.773891][ T4936] blk_mq_run_work_fn+0x16c/0x300 [ 528.779424][ T4936] process_scheduled_works+0xa8e/0x14e0 [ 528.785502][ T4936] worker_thread+0xa47/0xfb0 [ 528.790606][ T4936] kthread+0x388/0x470 [ 528.795187][ T4936] ret_from_fork+0x514/0xb70 [ 528.800293][ T4936] ret_from_fork_asm+0x1a/0x30 [ 528.805575][ T4936] [ 528.805575][ T4936] -> #4 (set->srcu){.+.+}-{0:0}: [ 528.812700][ T4936] __synchronize_srcu+0xc9/0x2f0 [ 528.818210][ T4936] elevator_switch+0x1e8/0x7b0 [ 528.823548][ T4936] elevator_change+0x2fa/0x480 [ 528.828914][ T4936] elevator_set_default+0x375/0x440 [ 528.834727][ T4936] blk_register_queue+0x3f3/0x4e0 [ 528.840388][ T4936] __add_disk+0x6cb/0xe30 [ 528.845271][ T4936] add_disk_fwnode+0xfb/0x4b0 [ 528.850454][ T4936] nbd_dev_add+0x733/0xb60 [ 528.855386][ T4936] nbd_init+0x15f/0x1e0 [ 528.860188][ T4936] do_one_initcall+0x250/0x870 [ 528.865559][ T4936] do_initcall_level+0x10a/0x1a0 [ 528.871074][ T4936] do_initcalls+0x59/0xa0 [ 528.875925][ T4936] kernel_init_freeable+0x29d/0x3e0 [ 528.881640][ T4936] kernel_init+0x1d/0x1d0 [ 528.886484][ T4936] ret_from_fork+0x514/0xb70 [ 528.891588][ T4936] ret_from_fork_asm+0x1a/0x30 [ 528.896858][ T4936] [ 528.896858][ T4936] -> #3 (&q->elevator_lock){+.+.}-{4:4}: [ 528.904671][ T4936] __mutex_lock+0x19d/0x1550 [ 528.909775][ T4936] elevator_change+0x1af/0x480 [ 528.915050][ T4936] elevator_set_none+0xb5/0x140 [ 528.920415][ T4936] blk_mq_update_nr_hw_queues+0x5ef/0x19f0 [ 528.926739][ T4936] nbd_start_device+0x189/0xb30 [ 528.932114][ T4936] nbd_genl_connect+0x1597/0x1c10 [ 528.937652][ T4936] genl_family_rcv_msg_doit+0x233/0x340 [ 528.943792][ T4936] genl_rcv_msg+0x614/0x7a0 [ 528.948808][ T4936] netlink_rcv_skb+0x226/0x4a0 [ 528.954177][ T4936] genl_rcv+0x28/0x40 [ 528.958672][ T4936] netlink_unicast+0x7bb/0x940 [ 528.963948][ T4936] netlink_sendmsg+0x813/0xb40 [ 528.969225][ T4936] sock_sendmsg_nosec+0x13a/0x180 [ 528.974771][ T4936] ____sys_sendmsg+0x54e/0x850 [ 528.980188][ T4936] ___sys_sendmsg+0x2a5/0x360 [ 528.985385][ T4936] __x64_sys_sendmsg+0x1b1/0x290 [ 528.990834][ T4936] do_syscall_64+0x174/0x580 [ 528.995939][ T4936] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 529.002338][ T4936] [ 529.002338][ T4936] -> #2 (&q->q_usage_counter(io)#49){++++}-{0:0}: [ 529.010934][ T4936] blk_alloc_queue+0x544/0x690 [ 529.016208][ T4936] __blk_mq_alloc_disk+0x194/0x390 [ 529.021930][ T4936] nbd_dev_add+0x494/0xb60 [ 529.026861][ T4936] nbd_init+0x15f/0x1e0 [ 529.031538][ T4936] do_one_initcall+0x250/0x870 [ 529.036812][ T4936] do_initcall_level+0x10a/0x1a0 [ 529.042260][ T4936] do_initcalls+0x59/0xa0 [ 529.047100][ T4936] kernel_init_freeable+0x29d/0x3e0 [ 529.052821][ T4936] kernel_init+0x1d/0x1d0 [ 529.057655][ T4936] ret_from_fork+0x514/0xb70 [ 529.062759][ T4936] ret_from_fork_asm+0x1a/0x30 [ 529.068031][ T4936] [ 529.068031][ T4936] -> #1 (fs_reclaim){+.+.}-{0:0}: [ 529.075329][ T4936] fs_reclaim_acquire+0x71/0x100 [ 529.080809][ T4936] __kmalloc_noprof+0xbc/0x720 [ 529.086087][ T4936] tls_sw_sendmsg+0x599/0x2860 [ 529.091434][ T4936] sock_sendmsg_nosec+0x90/0x180 [ 529.096882][ T4936] sock_sendmsg+0x1ca/0x2d0 [ 529.101892][ T4936] splice_to_socket+0xb5e/0x12a0 [ 529.107343][ T4936] direct_splice_actor+0x101/0x160 [ 529.112967][ T4936] splice_direct_to_actor+0x57b/0xcb0 [ 529.118869][ T4936] do_splice_direct+0x195/0x290 [ 529.124237][ T4936] do_sendfile+0x52e/0x7c0 [ 529.129163][ T4936] __se_sys_sendfile64+0x144/0x1a0 [ 529.134900][ T4936] do_syscall_64+0x174/0x580 [ 529.140003][ T4936] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 529.146497][ T4936] [ 529.146497][ T4936] -> #0 (sk_lock-AF_INET6-NBD){+.+.}-{0:0}: [ 529.154735][ T4936] __lock_acquire+0x1520/0x2cf0 [ 529.160129][ T4936] lock_acquire+0x106/0x350 [ 529.165149][ T4936] lock_sock_nested+0x41/0x100 [ 529.170673][ T4936] inet_shutdown+0x6a/0x390 [ 529.175688][ T4936] nbd_mark_nsock_dead+0x2cb/0x550 [ 529.181314][ T4936] recv_work+0x1cee/0x1e10 [ 529.186239][ T4936] process_scheduled_works+0xa8e/0x14e0 [ 529.192391][ T4936] worker_thread+0xa47/0xfb0 [ 529.197487][ T4936] kthread+0x388/0x470 [ 529.202153][ T4936] ret_from_fork+0x514/0xb70 [ 529.207263][ T4936] ret_from_fork_asm+0x1a/0x30 [ 529.212529][ T4936] [ 529.212529][ T4936] other info that might help us debug this: [ 529.212529][ T4936] [ 529.222828][ T4936] Chain exists of: [ 529.222828][ T4936] sk_lock-AF_INET6-NBD --> &cmd->lock --> &nsock->tx_lock [ 529.222828][ T4936] [ 529.235882][ T4936] Possible unsafe locking scenario: [ 529.235882][ T4936] [ 529.243333][ T4936] CPU0 CPU1 [ 529.248729][ T4936] ---- ---- [ 529.254109][ T4936] lock(&nsock->tx_lock); [ 529.258521][ T4936] lock(&cmd->lock); [ 529.265015][ T4936] lock(&nsock->tx_lock); [ 529.272025][ T4936] lock(sk_lock-AF_INET6-NBD); [ 529.276871][ T4936] [ 529.276871][ T4936] *** DEADLOCK *** [ 529.276871][ T4936] [ 529.285606][ T4936] 3 locks held by kworker/u9:1/4936: [ 529.290874][ T4936] #0: ffff888029e75140 ((wq_completion)nbd1-recv){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 529.302146][ T4936] #1: ffffc9000fb97c40 ((work_completion)(&args->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 529.313882][ T4936] #2: ffff8880800b5a68 (&nsock->tx_lock){+.+.}-{4:4}, at: recv_work+0x1cd9/0x1e10 [ 529.323179][ T4936] [ 529.323179][ T4936] stack backtrace: [ 529.329142][ T4936] CPU: 0 UID: 0 PID: 4936 Comm: kworker/u9:1 Not tainted syzkaller #0 PREEMPT(full) [ 529.329160][ T4936] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 529.329170][ T4936] Workqueue: nbd1-recv recv_work [ 529.329189][ T4936] Call Trace: [ 529.329194][ T4936] [ 529.329200][ T4936] dump_stack_lvl+0xe8/0x150 [ 529.329223][ T4936] print_circular_bug+0x2e1/0x300 [ 529.329239][ T4936] check_noncircular+0x12e/0x150 [ 529.329265][ T4936] __lock_acquire+0x1520/0x2cf0 [ 529.329285][ T4936] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 529.329366][ T4936] ? try_to_wake_up+0x8c5/0x14d0 [ 529.329392][ T4936] ? inet_shutdown+0x6a/0x390 [ 529.329410][ T4936] lock_acquire+0x106/0x350 [ 529.329427][ T4936] ? inet_shutdown+0x6a/0x390 [ 529.329446][ T4936] ? __queue_work+0x1ea/0x10a0 [ 529.329474][ T4936] lock_sock_nested+0x41/0x100 [ 529.329490][ T4936] ? inet_shutdown+0x6a/0x390 [ 529.329508][ T4936] inet_shutdown+0x6a/0x390 [ 529.329527][ T4936] nbd_mark_nsock_dead+0x2cb/0x550 [ 529.329550][ T4936] recv_work+0x1cee/0x1e10 [ 529.329564][ T4936] ? __lock_acquire+0x683/0x2cf0 [ 529.329584][ T4936] ? register_lock_class+0x31/0x2e0 [ 529.329603][ T4936] ? __lock_acquire+0x683/0x2cf0 [ 529.329624][ T4936] ? __pfx_recv_work+0x10/0x10 [ 529.329638][ T4936] ? do_raw_spin_lock+0x12b/0x2f0 [ 529.329653][ T4936] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 529.329669][ T4936] ? process_scheduled_works+0xa20/0x14e0 [ 529.329689][ T4936] ? rcu_is_watching+0x15/0xb0 [ 529.329710][ T4936] ? process_scheduled_works+0xa20/0x14e0 [ 529.329725][ T4936] process_scheduled_works+0xa8e/0x14e0 [ 529.329751][ T4936] ? __pfx_process_scheduled_works+0x10/0x10 [ 529.329768][ T4936] ? assign_work+0x3cf/0x5d0 [ 529.329785][ T4936] worker_thread+0xa47/0xfb0 [ 529.329805][ T4936] ? __kthread_parkme+0x71/0x1f0 [ 529.329825][ T4936] kthread+0x388/0x470 [ 529.329844][ T4936] ? __pfx_worker_thread+0x10/0x10 [ 529.329865][ T4936] ? __pfx_kthread+0x10/0x10 [ 529.329883][ T4936] ret_from_fork+0x514/0xb70 [ 529.329904][ T4936] ? __pfx_ret_from_fork+0x10/0x10 [ 529.329924][ T4936] ? __switch_to+0xc89/0x1420 [ 529.329941][ T4936] ? __pfx_kthread+0x10/0x10 [ 529.329960][ T4936] ret_from_fork_asm+0x1a/0x30 [ 529.329979][ T4936] [ 529.906775][T11746] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 531.016610][T11746] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 532.116697][ T6706] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 532.707631][ T4986] udevd[4986]: worker [16877] /devices/virtual/block/nbd3 is taking a long time [ 533.217409][T11762] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 534.316597][T11746] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 535.416893][ T7865] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 536.517090][T11746] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 537.616714][ T7865] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog